That’s the thing about speech: It’s very hard for governments to physically prevent it, but attaching consequences to making use of that capability usually works just as well.

The government failed to stop the spread of the DeCSS code and subsequent tools that were developed using that code. That’s kind of the point.