[Keith]

Not really sure how effective cracking down on passwords can be.

Any service that requires a password to access is always going to be prone to sharing, legally(!) or otherwise - after all we see it many times on data breaches that usernames and sometimes clear passwords are stuck on the dark web somewhere for anybody savvy enough to see.

I'm guessing that they'll be using a combination of IP addresses and device information, stored against each Disney account. If someone logins in from a new device from a completely different part of the country that might flag up. Similarly multiple existing 'active' devices logged in across different parts of the country (or world) might flag up as potential password sharing incidents.

I've heard of some jailbroken Fire sticks being available with streaming apps installed which somehow bypass the app logins. I dare say the changes Disney and Netflix are making may also help them to identify and block such (presumably illegal) devices.