I'm guessing the sensor isn't actually biometrically identifying the skin itself - ie you could put the watch on someone else, authenticate it with your phone, and it would work with all the same functions, because what the sensor is monitoring is an unbroken chain of contact, not the actual unique structures in / beneath the skin?
Or does it do a blood vessel map or similar of the location you wear it?