I can see that that could work on a locked down iOS device but a rooted android phone would surely be able to access to manifest file and make a copy of the key

I can see that that could work on a locked down iOS device but a rooted android phone would surely be able to access to manifest file and make a copy of the keys and stream contents. After all you only need one device to copy the stream and re-stream DRM free to others.