This seems to be not just bad coding and a grotesque inattention to security, but architectural decisions that seem to guarantee failure:
Interestingly, the vendor is not named, so it's not possible for consumers to make informed decisions on what product not to purchase:
This matters because a device with DRM poses significant legal risks to security researchers. Anti-circumvention laws like the section 1201 of the DMCA and European laws implementing Article 6 of the EUCD have been invoked to make civil and criminal threats against security researchers, on the theory that information about defects in a device will assist people who want to bypass the DRM, which is banned under these laws.Government is what we choose to do together. Like forcing you to only have insecure products to purchase. Behold your Philosopher Kings.