You're completely right but the source code doesn't even need to be leaked. Just reverse engineered. How else would we pirate movies from Netflix/Amazon/etc :)