Why does this not seem like a problem with Spotify’s implementation? Spotify is set up in a pretty rudimentary way too. Collaborative playlists are open to the world to edit, the only access control is via knowledge that the playlist exists and having a link to it.
I think Spotify integrates with your Facebook friends, so Facebook is essentially the one dealing with spam. iCloud isn’t a social network, so Apple would need to implement some sort of friending system where you don’t get spammed by fake accounts with invites.
Spotify doesn’t use Facebook for its friends system, it has its own. Also, that system is completely unrelated to the collaborative playlist feature.
Anyone with a link to your playlist can edit it if it’s set to collaborative. Oh, looks like they made the links time-limited at least.
For the next 7 days this will be available: https://open.spotify.com/playlist/6UlFLf2OiDRkMBz0DVplXH?si=_v_a7_hbSq6GL2CzDYu17g&pi=u-IDRM4YL6S8S6&pt=062e97dfcdaebeb71e537d83b08db922
To be honest, I’d rather they focus on making the experience similar if not the same across the different platforms. Android still has glaring bugs that the others don’t have (followed playlists still don’t get placed in folders), Windows still has missing features (no half star ratings).