This is unrelated to DRM. The Security Framework also observes the location of repositories. It is possible to configure it to forbid the installation of unknown repos.

For what is worth MeeGo, that also has this Security Framework, will have Extras (or whatever is the name for the meego.com community repo) enabled by default. MeeGo vendors will still be free to override this default with their own settings.