It's the question of the level of trust. Some code is trusted enough to run it. DRM is never trusted enough to run it (IMHO). You seem to be saying that since there is always risk, one shouldn't care about anything at all.