Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a

Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update. However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.