Security Flaw in Spotify Connect

[txcrew]

Spotify Premium + Sonos user.

Recently connected my Sonos speaker through Spotify connect via my iOS device. While browsing Spotify outside of my network on LTE, I noticed that I could still connect, and even play music on my Sonos speaker on my local network.

I can't begin to think of a reasonable use case for activating a remote speaker and playing to an empty room.

Reading past threads on similar topics indicate that Spotify not only says this is a non-issue, but it's a feature...?!

Spotify is opening up my internal network and exposing it to devices outside of my network, unbeknownst to me. Whether this behavior is by design or not, this is a security hole. Full stop. Spotify should not hold a key to my network.

How soon can this be fixed? Or is my situation rather uncommon?