[thehappypm]

Security and performance come to mind.

If they just served podcasts directly from third parties, third parties would be able at least in theory to push potentially malicious data to the Spotify app (and Spotify users' devices).

As for performance, if the third party has an outage, then it would make Spotify look broken. And who knows if the third party site can serve the traffic well enough for a good experience.