in this hypothetical setup you're effectively downloading malware, I wouldn't really consider that a loophole. Regulation that concerns data ownership can do precisely what the name says, give you control over where your data lives.

If you have full sovereignty over your data and your computer and you decide to use software that downloads ads and blasts them to you, at some point even in the best jurisdiction you're responsible for what you install