Also worth noting that this did not work out, because their general counsel accidentally replied all to the email, giving everyone in the company a safe copy to leak.
"Reply-all" suggests that the same mail went to a set of recipients, but doesn't the watermarking strategy require each recipient to have their own unique copy?
Recipient A then clicks reply-all, now everyone has copy that was personalized to A. They might even notice subtle differences between them.