Let's not confuse invasive ads and tracking cookies with "exploits." We can dislike both, but they are definitively not the same thing and one is clearly a bigger real threat than the other.