The latter. The standard does not specify the interface that the DRM blobs talk to the browser, or even that it's an interface at all as opposed to a built in feature of a proprietary browser.