They gotta be careful depending on the type of security. If I were youtube, I'd try to walk servers into some sort of cfaa violation (hacking via bypassing security measures). I'm not saying that's what they're doing, but I'd look very carefully at whatever they changed and the method for end running it.