Mostly a privacy and ownership issue: Spotify doesn't own the device receiving their service nor are they paying for the bandwidth used for the ad payload, and it's none of their concern how these are used. In the end it all boils down to whether Spotify's right to run a business supersedes a person's rights of ownership.