If a cracked Spotify can still play music from their service, that’s on Spotify. The security should not be on the client, but on the backend.