[Retr0id]

But they don't control the playback stack, once the attacker has the keys. The attacker brings their own stack, decrypting the data with their own software.

[jsheard]

That doesn't help the attacker if their key can only decrypt the subset of frames which Netflix wants them to be able to decrypt.