From what I've seen, tech companies tend to be understaffed on enforcement and compliance, relative to their user reach. Was the "certification" anything more than a checkbox in an emailed Word doc? I expect that's one area where they could improve their diligence. I would argue that if you have a high volume advertiser who has already broken a TOS and continues to use the platform, that type of hands-off certification is deliberately negligent. Anyway, we'll find out more details from their FB account manager in the coming months.