As a philosophical issue, since the youtube-dl code is running the cipher off of the code provided by youtube, just as my browser is, why is my browser not similarly circumventing this protection?
At least with CSS a key needed to be found by means separate from actually watching the DVD and wasn't shipped with the user in the same package as the video itself.