One way would be to require logins and then timeout accounts that behave abnormally wrt ads. Given that WASM will be mainstream soon, it will be hard to monkey patch the code to prevent all this.