It’s nice to see the EFF say something about this.
You must be aware that the discovery of this software has shocked and angered your customers. Software that deceives the owner of the computer it runs upon and opens that computer up to attacks by third parties may be expected to come from malicious cyber-attacks; it is certainly not expected nor acceptable to be distributed and sold to paying customers by a major music company. Accordingly, EFF welcomes your company’s decision to temporarily halt manufacturing CDs with XCP and to reexamine “all aspects” of your “content protection initiative.”
EFF: An Open Letter to Sony-BMG
Of course, in this situation they probably don’t have any leverage. But it’s the thought that counts.