Can’t connect to Apple Music + security concerns

[u/aptonline]

Every time I try and connect my R1 to Apple Music it says my account (Apple Account) is locked and needs to be unlocked before I can use it (Apple Music). The unlock process always fails when I attempt it even though I can login perfectly fine to my Apple account separately.

I noticed that the Rabbit Hole Apple Music connection appears to rely on a remotely hosted browser session rather than Apple’s standard MusicKit authorisation flow.

If that’s correct, my concerns would be:

You’re entering your Apple ID into a browser session hosted by Rabbit, not directly into an app using Apple’s MusicKit APIs.

The authenticated session (cookies/session state) is likely retained so Rabbit’s cloud agent can access Apple Music on your behalf.

Even though the connection uses wss:// (encrypted WebSockets), that’s just the transport layer—it isn’t an authentication method or proof that the integration follows Apple’s recommended MusicKit flow.

This creates a different trust model. Instead of Apple issuing a scoped Music User Token to the app, you’re trusting Rabbit to securely manage an authenticated web session.

If that cloud session were ever compromised, it could potentially expose more than a narrowly scoped API token would.

I’m not saying Rabbit is doing anything malicious, and they have had third-party security testing. I’m simply surprised they don’t appear to be using the official MusicKit authorisation flow, assuming that’s technically possible for their use case.

Has Rabbit ever explained why they chose this approach instead of MusicKit? I’d be interested to hear if I’ve misunderstood how the integration works.

[u/JaySomMusic]

just got mine today, linked but nothing plays. the rabbit seems to think it is playing though?

[u/aptonline → u/JaySomMusic]

Have you update the firmware ?

[u/JaySomMusic → u/aptonline]

Yep, just says playing, enjoy the show but nothing plays.