CISA tells agencies to consider ad blockers to fend off 'malvertising'

I'm surprised ad blockers aren't considered a basic security measure like antimalware is considering the vast majority of ads are spyware and carry the risk of delivering further malware.