If the service Spotify uses to host/serve ads get hacked and delivers malware to my computer, they should be held responsible for the cost and time spent addres

If the service Spotify uses to host/serve ads get hacked and delivers malware to my computer, they should be held responsible for the cost and time spent addressing the malware. If I actually brought this up with them, I assume I would be laughed out of their office. Spotify can't have it both ways.