The risk is carefully managed. These malware ads are on the results page and are allowed until enough issues are raised. In other places, like Google's SSP for the rest of the web, there's far more malware because that reputational risk is pushed to the publishers.

Countermeasures aren't needed if adtech just stopped working with known bad actors and recognizable malpractices.