One (partial) way of looking at it is that modern advertising is a recommendation engine, but just reworked to be adversarial.
Because consumers know that advertising is an adversarial recommendation engine, restricting ads to a single place (like Google searches) isn't really feasible for the entire industry -- comparatively fewer people would visit that recommendation list because a large portion of them know that the recommendation list is adversarial.
So, modern advertisers are left with two options:
1. Insert their recommendation engine into other activities that users want to engage with (ads inside of or alongside other content).
2. Try to convince users that a portal for doing searches on their recommendation engine is actually a non-adversarial recommendation engine (recommendation engines where it's not always immediately obvious that advertisers can pay to influence results).
Closely related to 2 is in pairing their adversarial recommendation engine with a non-adversarial engine making it somewhat adversarial, but not so adversarial that users are willing to leave. For example, Google Maps does legitimately tell you about businesses nearby. It also combines ads into that system that are adversarial and that try to get you to buy things against your own best interest. But it's not so adversarial that the average user views it as useless, it still sort of works as a search engine. It's still food, it's just a little bit more poisonous than normal: enough to harm you a little bit, but not enough to kill you or to prompt you to stop eating it.