A copy truncates the destination before it completes, so a mid-copy
failure would damage the existing video the partial file exists to
protect. The partial is written to the destination's own directory, so
the rename is always same-volume; if it fails, the export errors with
the user's original video untouched.