Rough draft of EME Concerns document.

As discussed in various forums, this is a version of the opinion document that tries to catalog our concerns for EME as a web-facing API, without suggesting solutions or focusing on specific technical choices or problems with the current mechanism. Feedback definitely welcome.

In general, powerful web platform features that that have the ability to harm the user should not be in the hands of anyone who sits next to the user in a coffee-shop. This is why many new web platform features are only available to secure origins (e.g. service workers).