@hacks4pancakes This comment might get lost in here, but, to back that up, the Australian Government Information Security Manual (a compliance requirement for government, including defence), under System Hardening, has a control, number 1485, that specifically calls for systems to "not process web advertisements from the internet."
Right in between no Java from the internet and no Internet Explorer on the internet.