[dark_photon]

I think the point is that Chrome uses PPAPI for both Flash and EME.

Firefox also uses some kind of sandbox for plugins (like Flash) but yes, their planned sandbox for EME is stricter.