Still, they need to make sure that, for example: - you don't give your credentials to all your friends (so that they too can watch movies, without having to get their own Netflix subscription) - their content doesn't get streamed outside of the US, because that would be a violation of the license agreements that they have signed.
We studied their system to understand how they implement those security constraints, and how they manage to do it without affecting performance and user experience too much. The incentive was to learn, not to break their security.