This isn't even theoretical! See the Sony rootkit DRM scandal. EME will almost certainly become an attack vector in the future.