FWIW, the article does say: The Spotify rep also told the publication that Spotify will support the Car Things already purchased, which "will perform as intende

FWIW, the article does say: The Spotify rep also told the publication that Spotify will support the Car Things already purchased, which "will perform as intended." But arbitary code execution sounds like it would be a more robust outcome.