There will always be vulnerabilities and improper implementations and workarounds, but, the entire point of secure enclave is for someone at netflix or your employer's HQ to be comfortable knowing they have a toehold in your machine that can't be broken via Remote Attestation, and that there is no way for you to get the keys out of it when it's acting as a HSM.
You can always disable it/etc, or use another browser (like firefox) that doesn't provide a secure enclave. But then, google won't serve you video, just like netflix reduces the stream quality for people who don't have the hardware DRM set up right.
Since 95% of the world is already using chrome anyway (other than ios), this is a pretty low-risk move.
that'd be infeasible to do given the sheer volume of videos uploaded per day. even if we limited it to the most subscribed creators (10m+ subs) it'd be hard for pirates to keep up.
Not to mention seeding. If we had enough seeders to keep that sort of volume up, those p2p video services would be in a much better state.