I think there are 2 types of drm, one is invasive and the other is permissive. Everything needs some sort of Auth and permission drm, and usually it sits in a company dB and if they go under or remove it, you lose Auth. I think that type of system can be better under a blockchain model, moving universal ownership to a decentralized ledger. Services still must recognize the ledger as valid, but then no single provider is the arbiter of your ownership and Auth.