How is this not a privacy concern? Data deemed private has become public. I agree music playlists are not as sensitive as health, banking or political associations for example but it is still of concern. Where would you draw the line between sensitive and not? Being privacy centric when handling personal data should be a core principle and any company breaching this principle should be exposed.
It’s possible to block without spying on though.