> It's your responsibility to make sure you trust that entity, and do your due diligence. > What does this entail? My whole point is that that's up to you to

> It's your responsibility to make sure you trust that entity, and do your due diligence. > What does this entail? My whole point is that that's up to you to decide. No one else can make that choice for you. The VAST majority of people have decided that the risks they face today are worth it, and continue to use the web with js enabled. If you're not one of them, I absolutely respect that decision, but it means you'll have to accept that companies are making financial and security based decisions based on the behaviors of normal people. That means that when spotify (and lets be honest, every other streaming service) doesn't work without js, you go somewhere else, and use something different. That's the whole point I'm making. You can make any decision you'd like with regards to your own security, you can make any decision you'd like with regards to the sites you visit. But that site is free to act in it's own interests, including adding features and services that target the majority of their uses.