Optional DRM, but essentially on by default. Could maybe consider it malicious compliance as its so easy to bypass but still allows them to check the DRM checkbox.