It didn't? Then how are they getting the streamed bits directly? Since there's generally a torrent available that is the direct source, no re-encoding.

Or do you mean they read the source from hacking into a memory buffer after the player does decryption but before decoding, instead of doing the decryption themselves?