They probably get advertising dollars per subscriber. The people stealing passwords arent counted as subscribers so they dont get revenue for those.
Also, they would be wise to get advertising dollars per viewer as TV streams are often legally multiplexed in a household. This had traditionally been the case in the pre-digital world w/ Nielsen ratings.
Newspapers used to estimate IIRC that each paper was viewed by an average of three people, therefore the advertising “reach” was standardized as such.
It’s all a bit arbitrary, in the case of paying for eyeballs, as opposed to clicks.
The only revenue they are losing that is real revenue is subscription revenue.