Is this just using a hypervisor to virtualise system services the DRM uses to assure it it’s not being monitored or interfered with at the OS/kernel level?

Essentially yes, uncertain about the networking.