Devices that can play back DRM-protected contents do so in a module called “CDM”, which runs securely, and has a standard interface to the rest of the content playback chain. The more sensitive parts of a CDM are often implemented in a TEE.
Real-World Examples
Chrome, Firefox, Edge, Safari, etc., all run their DRM content playback pipeline within a CDM, which can be a Widevine CDM, a FairPlay CDM, a PlayReady CDM…