From my understanding, it's relatively well known how to break Widevine L3, but nobody wants to release code (for obvious reasons). Widevine L1 is much better secured, as it's required to be implemented in hardware.