if ads were just static PNGs with a link you went to if you clicked I wouldn’t have ever bothered. but ads became a major malware and tracking risk so plugging that security hole became mandatory.

It’s true. I work in a computer shop and we see literally thousands and thousands of dollars lost from people clicking on ads that look like normal buttons (things like “Download”, “Next”, etc). And not just the elderly either. Everyone has a a combination of inputs to get scared and comply. Folks that are otherwise extremely competent and savvy can get scammed too.

The best security you can have online is adblockers, only beaten by using trusted websites.

Edit, fair points with sites being slimy these days. I meant using legitimate versions of websites rather than copy/fake websites designed to steal credentials.