I remember reading that the most significant impact DRM has is on security research. Individuals don't care about bypassing DRM, but an organization is not going to fund anything involving it because of the legal concern. So if a researcher wants to look into a file format behind DRM, or the DRM mechanism itself, being used as an attack vector, that's not going to get funding.

The defense that companies will make is that they're happy to grant exceptions in these cases, but in practice the company will make the exceptions as narrow as possible to err on the side of maintaining as much control as possible, while a research organization will want to err on the side of avoiding potential grey areas, meaning the exceptions are inevitability too restrictive to allow much of anything to come of them.