>will never work
As in it can't be secure? Well it's tied in with trusted computing, see this Widevine document:
https://storage.googleapis.com/wvdocs/Widevine_DRM_Architect...
If all of the decryption takes place in a "trusted zone" on "your" device, then it's pretty secure.