Forcing spotify to use in-app login

[winslowsem]

I am trying to write a SELinux policy for spotify where I encountered a problem: for Spotify to use browser-login Spotify will have to have self:capability sys_admin, which is, clearly, a terrible permission to grant. But Spotify is forcing me to use browser-login. How do I force Spotify client to resort back to in-app login?

[winslowsem]

Also in another post the dev mentioned that browser-login is a security feature - literally how?? Like why would logging in through a webbrowser and callback enhance security? From my point of view that just make it worst cause there is a larger attack surface and logging through browser require a HECK ton more permissions, including allowing spotify to access the browsers' files, ptrace attach and the worst of all: sys_admin capability.

[winslowsem]

When I say a "heck bunch more permissions” I MEAN IT