How can they sell ebooks so everyone can't simply email them to their friends?  How does that work?

When you buy a DRM'd ebook, your copy of it is encrypted with a key that's specific to your device or your account. If you send your copy of the book to someone else, they won't have that key, so they won't be able to read it - or not unless you want to trust them with the login details for your account.