Spotify can also chose to prevent older clients to connect and only allow the latest one with new protections rendering this attack useless.