> it's built-in to Spotify as a setting somewhere, from memory

That setting has been removed a few years ago. It now works the other way round: You authorise last.fm to access your Spotify data.