The part I didn't really include is their list of 7 requirements, which are...
1-The acceptable A/V container formats (e.g. Fragmented MP4, WebM, etc.);
2-The acceptable audio and video codecs (e.g. H.264, VP8, AAC, etc.);
3-The streaming protocol (e.g. HTTP, RTP, etc.);
4-A way for the streaming protocol to adapt to available bandwidth;
5-A way of conveying information about available streams and other parameters to the streaming player module;
6-A way of supporting protected content (e.g. with DRM systems);
7-A way of exposing all this functionality into HTML5
So...yeah, definitely DRM. And not coy, as you point out.