Anecdotally, I haven't bought a single CD since the Sony rootkit fiasco. I had bought one, got rootkit'd at the time, and vowed not to buy another. I don't regret not buying any more.
Also, I believe you had to install junk software from the CD to a Windows or Mac Computer, before those OSs were hardened somewhat. Avoiding all things Sony seems a better strategy than otherwise benign CDs.
https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...