I didn't consider HTTP basic auth as part of the open ecosystem because it's not, as far as I know, widely supported by clients. Is it? Maybe my assumption was wrong.

But it's also not part of the original "open" podcast vision because it is closed by definition, on an access level, and opens the door to tracking. Wouldn't most users in the open ecosystem be confused by an auth prompt? Wouldn't it be better for the open ecosystem if this sort of essentially closed feed just be cleanly inside Spotify (or whoever else's app)? This is my thinking, although I appreciate that opinions can differ.

I agree my language like "pervert" and "corrupt" can read as emotional, but I deployed it because I was trying to argue against the people who criticize Spotify using similar language, not to criticize anyone or raise emotions. If anything I'm trying to praise Spotify here.