> custom hardware keylogger

And that right there should curdle the blood of the folk who won't allow Spotify. (I don't mean to suggest this is a security risk, I don't think it is, but those words ...)