can it happen that the user references a file that is not in the package ?

Anyway this is not a big addition to support an error case, and it feels safer to me. I don't want an app to not start because of this.