Really, I think it falls on the company that chose to license DRM in the first place. Unfortunately, there’s nothing compelling vendors legally speaking that I’m aware of, but there damn well should be. I also think unavailability due to DRM downtime or issues should have ramifications, as well.
That's the DRM's problem to solve. Paying customers shouldn't have their stuff stolen because someone else might be a non-paying customer.