The thing that stops it is, ironically, personal agents. Get one to interact with the ad-driven one if you need to and filter ads out.
I suppose the very reason why we haven't seen ads yet is that they're trying to figure out how to prevent exactly this.
I suppose the very reason why we haven't seen ads yet is that they're trying to figure out how to prevent exactly this.