A developer bragged about building 'fun' DRM for an NSFW ASMR platform. What followed was a three-round patch war that serves as a masterclass in why client-side JavaScript protections are a complete waste of everyone's time—and how to hijack the MediaSource API to prove it.