I created a custom player last year, for my own sites. So far nobody's been able to find the video file locations or download the videos. 4 small scripts, change a couple server settings and you're all set
No Flash or JS needed by the surfer and code is hidden from prying eyes.