At one very early point in its history, yes, I understand that was accurate. Then they encrypted them, but the key was easy to find, and then they started doing more complex stuff.

It's of idle academic interest to me. Never used Spotify, but I don't wish them harm either.