Yes, but if you consider on what systems people listen to music (personal computers, not servers) then unprivileged code execution can be actually pretty seriou

Yes, but if you consider on what systems people listen to music (personal computers, not servers) then unprivileged code execution can be actually pretty serious. You could get access to their email. You could steal their private SSH keys. Steal the browser's cookie cache. Get access to their password manager. Pull API keys out of private code bases. etc. So I wouldn't shrug it off.