They can, but that seemed a bit rough.
Yes, they were, and you know what? They did.
Look, there's your version of events, and there's the security officer's version of events... but there's also the surveillance camera's version of events. So keep that in mind.
You could sue, but that would probably make the odds of your girlfriend getting arrested for larceny 100%.