True, he just tells the ad buyers.

I have never heard of any leaks of private messages (by facebook, let's not count shoulder surfing or the counterparty telling) coming back to haunt the people who wrote them. So the risk you are mentioning seems more theoretical than the very real risk if a friend runs it.

Good point. I should have excluded law enforcement et al from my statement.