My personal experience with this was with some import CDs (from Japan) that, from what I recall, messed with the error correction part of the data so that it skipped horrendously in my PC (so it was impossible to rip in cdex) but played fine in (most) standalone audio players.
"As the Copy Control discs do not conform to the requirements of the CD standard, they are not labeled with the CDDA logo, which is trademarked by Philips."
Redbook CD-DA has one subcode byte and eight error correction bytes per frame.
FTFY
By default, Win96 would run that CD. You didn't tell it to. You had to go change the setting from the default. You had to tell Win95 to not autorun a CD.
More on u3: https://en.m.wikipedia.org/wiki/U3_(software)?wprov=sfti1
0: https://forums.hak5.org/topic/2843-usb-hacksaw-development/
1: https://forums.hak5.org/topic/2361-usb-switchblade-developme...
But as usual, one rotten apple spoils the entire barrel.
Having said that i did have my aunt (who is generally afraid that if she does something wrong the computer will break forever) spell me out the options in a popup (for a photo dvd she got from a photographer for a relative's graduation) over the phone once though, so i'm sure that, if nothing else, it can be a bit unexpected for less knowledgeable users.
Only combined CD-ROM/CD-R + CD-DA formats together with the unfortunate eagerness of Windows to auto-execute everything allows such rootkits.
So if you feed a music CD to a real old CD player, or to (say) a properly configured Linux computer: No privacy terrors.