Earlier quoted context omitted.
Spotify: Serves arbitrary, third-party content through known malware vector. Users: Blocks known malware vector. Spotify and 'the usual' HN crowd: shocked_pikachu.jpg
At least now, Spotify can only be downloaded in the Windows store (they discontinued use of the desktop application on Windows 10). As I understand it, W store apps are sandboxed, so something like this reasonably isn't possible anymore (at least without an escape exploit)?
[1]: https://pi-hole.net/