The NFT/NFC is locked so the tag is immutable, and only the seller and Amazon have the public key. Barring some hack on the NFT/NFC tagging software (which could happen in theory), you'd need both the private and public key to create a counterfeit object, along with a MFA token of some sort (e.g., biometric data, another OTP like Yubikey). And this would be true for every physical and/or digital print.