In theory funkwhale can be private, but no one is going to bother you for having a public one. Mine has been running for 2 years without any takedown requests.

If enough people started using funkwhale to the point it actually affected spotifys revenue they might start to care, but as much as i would like for that to happen, i dont think its very likely.