Does any company in the world that serves ads from Google not do this or state this?
How would you technically host ads on your site without "running arbitrary code"? How would you add an analytics solution without doing that?
And also, focusing on this defeats the actual purpose of this article. I assume it means you agree with it's message and are just nitpicking? (Or don't and are deflecting.)