The interesting part of this is the "sandbox" intended to keep the DRM module out of parts of the system you don't want it messing with. Some general commentary here:

https://blog.mozilla.org/blog/2015/05/12/update-on-digital-r...