To some extent, it also 'phones home' to Sony over the Internet and uploads some of this information about your activity to them, ... potentially even identifying information such as your name, e-mail address and location on the Internet.
People paid Sony for music, not an invasion of their computers. Sony must right the wrong it has committed. Recalling the CD's is a beginning step in the process, but there is a whole lot more mess to clean up.
This is only one of the many things Sony must do to be accountable for the damage it's inflicted on its customers.