They seem to be treating the badges like currency, with lots of fiddly details that a counterfeiter either won't think of (rare) or won't be able to replicate easily if at all. That specific one might catch fake IDs made by locals, because people tend to fix spelling errors without noticing.

I hope that there are other, more effective tests that Bellingcat decided not to publish, but this is the US military, which had one launch code for all its nuclear weapons, for many years.

Acdendum: I double-checked this. Many of the missiles needed no code. The ones that did were set to 00000000, and just in case you forgot, it was in the how-to-launch-the-missiles checklist.