L1 has been bypassed by piracy groups for years (through social engineering). They just don't share the keys publicly because it would give their opponents an advantage. See [1].

[1] https://news.ycombinator.com/item?id=29702110