Was there anyway to make this work unless every CD was burned with a different key used to do the encryption?
No. That cracking group would have known a priori the phone call was a pretense, because id was very unlikely to press distinct CDs. So they could focus on conventional cracking techniques.
(maybe a different one per geo-locatoin, if at all)