In other news, you can record your screen and share it with anyone.

This is really not at all shocking. I would be really impressed if they had bothered using some kind of one-time-key for each user who is authorized to see the content, but given that you can just record your screen, or take a screenshot, or, like, literally hold your phone up and show anyone, the idea that there should be something more secure or authenticated in place doesn't make much sense to me.

Do they want to add DRM to Instagram stories? Probably not.