Hi,
We are using an AES encryption key length of 128 bits. For our standard DRM (drmType=evo), you are right, there are ways to extract the keys from the files retrieved by typical HLS players. We do have another DRM (drm=verimatrix) where encryption keys are stored remotely, and only licensed players can retrieve the remote keys.
Cheers,
Don