The same argument applies to not including copyrighted code. I can't possibly know if a contribution is a direct copy of some private code somewhere, but it's still reasonable to have a policy against it.