Don't you think people will inevitably crack the software side of things (as has been done with the lower levels of Widevine)?
The end game is probably integration with a TPM that produces the token, or at least whatever part of it verifies that the chrome binary is genuine and that there is no forbidden software running on the client machine.
The end game is probably integration with a TPM that produces the token, or at least whatever part of it verifies that the chrome binary is genuine and that there is no forbidden software running on the client machine.
That is exactly the goal of this, and why it needs to be opposed fiercely.
Kinda like how Widevine works. No keys means lower quality.