All it takes is another vulnerable device's keybox being yanked and abused for a while until the keybox leaks further causing revocation of those Widevine keys.

They have quite a supply of keyboxes available to keep decrypting for a while.