I just assume it will be too tempting to also serve ads to paying customers. Depending on the subtlety, you might not detect the difference.

Maybe we need some kind of "Truth-teller/Liar puzzle" solution—play one LLM off another.