Using this dark pattern is probably necessary, as it is the only robust way to protect them from being click-frauded. You can earn only small rewards by watching ads in a single browser, so there is a big incentive to run as many automated brave instances as possible. Then send it all to one wallet and cash out. But one would need to complete KYC for each instance. You can't move the tokens without it, so it can't be scaled up.