But if the content keys work with
actual open source software, then that software can always be modified to decode the content and remove any restrictions that the publisher might wish to apply.
That's why they have to obfuscate things at the code level too.