CDkey is DRM. Before Steam the cdkey was used before you could install the game. After Steam you needed the internet use the cdkey.
Requiring the internet before you can install a game has cut off millions of offline PC gamers from buying PC gamers at retail. Offline PC gamers can not buy PC games at retail. Before you tell me that retail is dieing and dead, console games still sells really well in retail because offline gamers can still buy console games.
CDPR is catering to the offline PC gamers, who now can buy their game at retail. That is a good thing.
Digital distribution is fine. Steam, gog, origin, uplay, ect are all fine. They cater to the online gamers and it's all fine. What digital distributions can not do is cater to the offline gamers. Retail caters to the offline gamers. That is why Steam, origin, uplay, and the rest, needs to get out of retail. Internet can not be a requirement when buying from retail.
Anyway. I have a strong feeling that there will be no cdkey in the PC retail version and that there will not be any digital backup codes. Which is fine. It makes sense. I only say this because I don't want people to have that expectation. If you not expecting it, you won't be disappointment and if there are digital backup codes, you can be happy about that. Whereby not having that expectation or should be, should have, attitude concerning codes. Just play the game.
Having The Witcher 3 PC retail box, you can just play it where ever you go. Home, road trips, flying trips, train trips, holiday spots, ect. Install and play, ftw. Thank you CDPR.