There's the fundamental limitation that the odds of any maintainer rewriting the entire graphics pipleine to secure the video path from the user for DRM on Linux is roughly zero.