Soundcloud has this same problem. Anyone with a relatively intermediate knowledge of html and knowledge of chrome’s in browser dev tools can ‘jack’ any kind of streaming content from a website. ESPECIALLY if it is streamed using HTML5 specific features.