I pay for family spotify - we all use it a lot and the Daily Mixes, Release Radar, Discover Weekly playlists are unbeatble. I’ve used Tidal, Deezer, Youtube music before but their playlist creation is nowwhere near as good.
However I do download from Deemix as a backup . For me 128kbp is totally fine for what I need - yes its not the highest quality, but through bluetooth speakers in the car or bluetooth headphones it sounds absolutely fine for me. It might not be CD quality, but its better than broadcast radio, which is perfectly good enough for me.
iOS users have plenty of options here too
DNS and VPN blocks will work on most apps and all browsers.
I prefer Asguard dns and then Safari extension or Brave
It’s not about a media player ‘attempting to execute random code’ - an exploit is found which lets it run a command that it shouldn’t. You used to be able to jailbreak phones by loading a .pdf file that used an exploit to gain root privileges and execute code. It wasn’t a feature of the PDF reader. It was a bug that could be exploited when a specific string of characters was entered to effectively crash the pdf reader and let it run its own code instead.
A txt could easily contain malware - any file could.