Is Widevine L1 "just software"? If its key distribution can somehow remain uncracked for years then maybe it could also do client-side watermarking.