matchboxbananasynergy I think disabling Widevine is an important feature, because the Widevine ID (which I believe is unique to the hardware, correct me if I'm wrong) can be used to fingerprint the user across user profiles. Currently, this access is permissionless. I think there should be a popup when an app tries to access the Widevine API, and the user should have to grant access to it, similar to how it works in Firefox.