> by standardizing everything but (in essence) the authenticated key derivation step

Is there another interpretation of 'everything' in this context? You're making EME far more comprehensive than it is. CDMs do way more than derive a key, so your statement is false on its face.