I think that a crucial point about XOR-based systems is that both Bob and Alice can produce the "other half" of their random-looking file which produces a legit

I think that a crucial point about XOR-based systems is that both Bob and Alice can produce the "other half" of their random-looking file which produces a legitimate non-random file (e.g. a video of their holiday), while claiming that the other party maliciously used the "first half" as the random-looking input against which they XORed their forbidden file. Unless an omniscient observer knows the publication date of all the "halves" in the system, it is impossible to say which of Bob or Alice are telling the truth. Of course, both parties are inherently slightly suspicious for using such a system in the first place, but if it existed as part of a free public hosting service, and lots of people used it for legitimate purposes, it might only be as incriminating as using BitTorrent.