mrkgnao: The reason I added my definition is because I am not aware of any formal agreed-upon definitive definition. If there is one, could you please post it here. If you know of some useful heuristic test (of the type "if you have to do X or Y, then the game has DRM"), please post it as well.
I would lean on a definition that enjoys a broad consensus, for example from Wikipedia, although i admit the Wikipedia entry is perhaps less of a definition and more of an explanation.
To get the main CP2077 game, all I need to do is enter my GOG account, download the installers once and I can play the game for all eternity, installing it as many times as I want. This will not give me what has been termed "My Rewards", because while they are found within the installer, they are locked (it's not too difficult to crack this lock, but that's hardly the point).
As far as i can tell, the rewards are not included in the purchase price of the game. The fact that the data for the "rewards" might be part of the overall data/file package of the game does not automatically mean you are entitled to those "rewards" just due to their mere existence.
Butt as you noted, the presence of the "rewards" data in the installer can make it possible to find (unauthorized, inofficial) ways to activate them.
To get "My Rewards" I am forced to perform an additional step of logging in via galaxy. This has to be done every time I install the game (possibly every time I begin a new character). If galaxy servers are unavailable, I cannot access "My Rewards" on a new installation, short of cracking the artificial lock.
You got a strong point there regarding the activation of the rewards when installing the game (again?) some day in the future. Unless the developer/publisher includes automatic activation of the rewards as part of a future update (including for the offline installer), this is indeed a point of concern.