The export process uses bin/files migrate to migrate file data to blob storage on the aux tier. As a side effect, unreferenced files have their source data destroyed.
For files in S3, this can destroy the live copy of the file data. If the export subsequently fails, this can destroy the only copy of the data.
To fix this, I plan to give bin/files migrate some sort of --idempotent flag to avoid removing data.