C'mon, classified documents should not even go anywhere near systems where you can just click "reply all". But in general, you are right - this schema obviously does not work in situations where potential leakers can compare the doc versions.