There's an encrypted signature in the response from YouTube that youtube_dl decrypts in order to request the video content.

Perhaps it's not a super-sophisticated technical measure if youtube-dl was able to defeat it -- but it's a technical measure nonetheless.