I'm specifically talking about Widevine L1 in this case, which protects 1080p and 4K streams - not Widevine L3 which will always be vulnerable to some form of software-related attack. My remarks were mainly about how Widevine L1 has been shown to be much more protective in general against broadly-distributed attacks than AACS 1 and 2, even if pirates have secret workarounds.