Ideally, the entire path from source to display is secure and inaccessible (even for the operating system), that is the core promise of DRM. Of course the device must render the content somehow, but DRM is specifically designed to ensure that this path can't be intercepted or exploited.

What happens outside of that path, before it's decrypted or after it's displayed, is beyond what DRM is meant to control.