They could instead expand the permission system to group various ad api's so that each api is considered a distinct permission. Honestly would be good to do that in addition (i.e. separate from) the general internet permission.