It's still a security win, because the CDM sandbox is allowed to do substantially less than the Flash sandbox. Flash can access your webcam, filesystem, make an

It's still a security win, because the CDM sandbox is allowed to do substantially less than the Flash sandbox. Flash can access your webcam, filesystem, make any network connection, etc. The CDM only decrypts and decodes frames.