I think they raised that limit recently, but again nothing prevents you from creating lots of fake profiles just to get past that limit, then targeting all those profiles + the real user you want to target.
I believe that the majority of political microtargeting uses custom audiences. It's the way they assemble these lists that is really dodgy, and is the thing Cambridge Analytica is in trouble for.
