Meta and Google’s AI can create ads without asking—how to guard against rogue agents