Wouldn't that require the NFC tag to have a HSM / secure enclave? If the tag just contains a signed token, they'd just copy it, but sticking a secure enclave in an NFC tag is... probably doable, but not cheap or easy. (Or if I'm wrong please correct me, because cheap/easy secure enclaves would be interesting, or I might be missing some detail of how you'd do the NFT side)