People are pointing out how every site will now (optionally) need its own DRM module. So how is this not a worse situation for users than Flash? Now there will

People are pointing out how every site will now (optionally) need its own DRM module. So how is this not a worse situation for users than Flash? Now there will be several popular modules that will all have their own vulnerabilities, and need patching, with the added disadvantage that they don't all have the same set of eyes watching them, as Flash does now.