It's an interesting point! But I don't think that they are strong or near enough to serve as strong controls. If you can run detailed invasive profiling and ad bidding for a couple of billion people like Google does, the limits on ML damage aren't strong, no?