The proposal is (probably by design) very vague at this moment but it's possible the platform-specific CDM binary could bypass the browser completely and paint a programmatically inaccessible overlay over the video element, using standard OS protected paths.