Hard to tell (probably both), but it's worth noting for most of these OSes (at least Roku or Android TV) the playback is generally being handed to the hardware native decoder rather than having anything to do with the OS.

Indeed, one of the nice things about Android TV is that from a content protection point of view you don't really need to trust the OS at all as it's all abstracted down to the hardware.