The root issue with the chrome is that google pulled it from their repos due being too old.
After a clean install software center reported "Couldn’t download from dl.google/insertstableof68.deb package with a 404 error.
I’ve pinged given address on a second pc and it’s indeed gone. Any new installed pc’s with given iso will not have a browser unless your pull request from ostree grandualy updates to 69.
For root password I discovered softwarecenter updates are run by the root acc on the read-only os part. While the user sits as quest on the -rw mounted parts however sudo -s access works with set password as usual. That’s all fine and dandy from a security standpoint as long as untrusted repos aren’t added.
Btw there is an outdated version of chromium aswell. It’s still on 67 while 69 should be out or 70 on beta and 71 on canary/waterfall.
Problem with widewine on chromium is licensing. Google widewine is propritary. I don’t think distribution can be done without licensing issues. Especialy for some asian regions where google services are restricted with local authoritys altogether. E.g China, Hongkong