Yes. The search results and music files are coming directly from Tidal, using someone else’s account. If you look in the network tab in the browser’s dev tools, you’ll see requests to Tidal.

Interesting design, since it’s trivial for Tidal to block something like this - they can see that the requests are coming from that site. I’m surprised they haven’t blocked it.