<i>closed source DRM module that can do arbitrary things on the host platform</i><p>I don&#x27;t know about other browsers, but at least Firefox is sandboxing EME modules so that they can only do a few approved things (security bugs aside, of course).