It's implemented in drive firmware, so the drive will refuse to read protected sectors without authentication.

That was a late edition. I have working DVD drives that will happily read anything on a disc, even if they can’t decode it.

Newer drives I bought will refuse reading what they won’t decide themselves (e.g. wrong region).