I feel like a lot of this is built on/after the Gizmodo IPhone debacle. Going as far as to remove the Digital Crown so that if someone found it they would assume it’s a fancy new iPod shows how paranoid they were after that.
I’m surprised they don’t put hard to spot unique identifying marks on the device and packaging so a photo of it immediately identifies the original source.
They may have done something like that, other packages could easily have slightly different wording, font use, or layout structure. Without having access to all of the samples it's impossible to know if their packages differ or are all the same.