Spotify account got compromised, and I was blessed with Spotify's approach to security because of it.
That is, their approach doesn't exist. They "don't share that data" when it comes to wanting to see devices logged into your account, and the only reason I found out my account was compromised was because my phone's Spotify player popped up saying that it was playing Spanish music on Firefox. I don't listen to Spanish music and I don't use Firefox.
Beyond that, no email, no warning about a new login, nada. Just sorta accidentally found out. So I changed my password and signed out every device, but I know now that I just have to wait long enough for it to be compromised again and there'll be no way for me to know unless I vigilantly check my history.