Hash functions necesarily have collisions. Also, it is perfectly possible to introduce bugs in the hash function (hash inputs, hash function itself) that allows cross account contamination.

Hash functions necessarily have collisions, but it's perfectly possible to make the expected time between collisions greater than the human lifespan.