For example, if the device was a TV, say, and the manufacturer wished it to have access to content with the highest protection requirements, they would need to work with a CDM vendor (or use something like Marlin), port the CDM to their new CPU and plumb it in to whatever API their chosen browser expects CDMs to have.