We know that this is something the publisher's want. That doesn't mean CDM functionality can't be standardized. It doesn't need to be a black box, and you don't need to trust the client any more than you trust the user.

The point EFF is making is that its up to the W3C to maintain the balance between the power of publishers and the freedom of users.