Well, what they did to Nvidia Tegra devices is either downgrade them to L3, or revoke them and issue a new L1 key for them. OTA updates patched something, but a hardware flaw can't be patched fully with a software update.
However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.
However, most people nowadays are simply exploiting phones and tablets with old vulnerable MSM chips, there are a lot more of those to choose from. Usually what Google does now is when someone publicly leaks a compromised device key, they revoke the unique key of that specific device but not the whole model. However, sometimes streaming services (especially Amazon, Netflix and Disney+) may still choose to blacklist an entire vulnerable model and limit it to SD playback.