Couldn't anyone just copy the composition of this fund and buy the same cryptos themselves without paying management fees or being locked in to Coinbase?
Yes, but it would take a lot of work, and would need to be updated whenever market share for a coin changes.
https://am.coinbase.com/documents/cbi-methodology.pdf
Edit: Looks like someone found the same info.