Content-defined chunking added to Bazel

Doesn't this mean that malicious inputs can deliberately cause super tiny or super huge chunks?