Right on point. Also its at the mercy of the application and even then one there must be a trusty third party who can certify that an application follows the spec. This is not practical.

The reliable and practical way is to have a ad blocker at the kernel level similar to browser ad blockers.