I could be wrong but the suggestion seems to be that plays are hashed before storage and the tracks exploit the hash algorithm in use. That, to me, seems far l

I could be wrong but the suggestion seems to be that plays are hashed before storage and the tracks exploit the hash algorithm in use. That, to me, seems far less likely than simple account compromise. Hash collisions have always been a security threat vector.