Preemption means that local municipalities cannot create laws, bylaws, ordinances, etc that are not in line with state law. Private companies are well within their rights to make their own rules, but it’s the citizen’s right not to abide. Doesn’t mean that private entity can’t sue, issue trespass, or otherwise ban that person from their business.
Disney’s reach is massive and their security is no joke.
Yes,I can imagine that of the many places in the US that jihadis would consider "juicy",DisneyLand and DisneyWorld would be close to the top of their list. I read somewhere that DisneyWorld is the single most popular tourist site in the world.