They have a digital "IOU" in the database (table) of someone who actually owns bitcoin [...]
Just wanted to add that the last part of this sentence does not need to be true. I would keep it at "They have a digital "IOU". The rest, under no proof-of-reserves, is theoretical and trust based.