Even there is no protocol in place, employee might not open the package if they are not curious. So this assumption does not add value to conclusion.
Hope this help
Hope this help