The decoder box has to decrypt the satellite signal, run it through a video codec, apply the fancy watermarking, and then output the signal. I'm guessing they've worked out a way of hacking the STB to extract the signal between the decryption and watermarking stages.