The entirety of HDCP exists to prevent this. That has literally been the driving factor in Secure Enclave adoption since day 1 too (along with bitlocker, but,

The entirety of HDCP exists to prevent this. That has literally been the driving factor in Secure Enclave adoption since day 1 too (along with bitlocker, but, video DRM has always been the other big one). There will always be vulnerabilities and improper implementations and workarounds, but, the entire point of secure enclave is for someone at netflix or your employer's HQ to be comfortable knowing they have a toehold in your machine that can't be broken via Remote Attestation, and that there is no way for you to get the keys out of it when it's acting as a HSM. You can always disable it/etc, or use another browser (like firefox) that doesn't provide a secure enclave. But then, google won't serve you video, just like netflix reduces the stream quality for people who don't have the hardware DRM set up right. Since 95% of the world is already using chrome anyway (other than ios), this is a pretty low-risk move.