Exactly. Personalized ads are now prompt injection vectors.