They're all equally evil, since they're all equally useless on non-Win/OSX platforms (which are the only ones providing a reliable protected AV path), and since they're all very similar in that they need a plugin.

IMHO If anything EME is more evil than the other options in that it standardizes (and this way implicitely mandates) a special plugin interface for DRM purposes only.

Users still have to install plugins, and now browser vendors get the blame if things fail (since the user will be hard pressed to identify plugin issues in "that website doesn't work").

I fail to see where it's the W3C's, browser vendors' or web users' responsibility to make the DRM vendors' lifes easier. And that's all EME does.