simplified proof step by unfolding
new; lemma card_diff_gt0
lemma card_gt1_imp_member
new lemma card_gt1_imp_non_empty; this is what we actually need, but card_gt1_imp_member also seems useful, so we keep it