Your own hardware could in theory, watermark the output from the secure element. By ripping the original stream you get superior quality and no watermark. As long as it's not economically viable to serve every user a unique version of the stream of course.