Can models actually stream the file in as they see fit, or is "read only enough" just an attention trick? I suspect the latter.

Depends the agent, they can read in chunks (i.e.: 500 lines at a time)