When you remove one of the three required factors (WHO, WHAT, or WHERE), the data doesn't just become "hard to find" - it becomes computationally impossible to locate. With 2^128 possible storage addresses, even if an attacker had the computing power of every computer on Earth, they couldn't brute-force their way to the data before the heat death of the universe.