Earlier quoted context omitted.
How much of that is really security vs. excercising power and control over a market?
If they can find the money and staff to implement securing third party cinemas to prevent copyright infringement by members of the public, perhaps they should spend a few dollars to secure their own premises.
Network attacks on infrastructure and/or exfiltration by rogue (or rouge) elements within your own workforce are vastly more difficult to detect. Not impossible, but they involve both violations of trust and allegiance, and plausible cover under other activities.
Though, once you're aware of / suspect such exfiltration, there are generally a limited number of places to look for suspects / points of access.