![](/static/61a827a1/assets/icons/icon-96x96.png)
![](https://lemmy.dbzer0.com/pictrs/image/a18b0c69-23c9-4b2a-b8e0-3aca0172390d.png)
I don’t believe those tools download directly from Spotify. They use the Spotify api to gather the metadata then they download the files off YouTube.
As I’ve seen others say, probably what you want to do is download them off Tidal or Quboz. Those YouTube rips suck.
Just to play devils advocate. Bitwarden.com is a much more valuable target. My instance is behind a VPN. I think its actually far more likely Bitwarden will have a breach similar to LastPass then I will. But I agree with you mostly.