You are completely right: browser security restrictions (CORS/DRM) prevent Web Audio API from processing streams from external CDNs or protected media.
Due to these built-in browser limits, I recommend turning off the extension via the popup toggle on sites that use DRM or strict CORS.
I will keep researching potential non-intrusive workarounds for future updates.
