so your solution is to waste a bunch of legitimate ad spend from a legitimate advertiser by sending illegitimate traffic and clicks to a hacker's site? What if the person dropping those links in those hacked sites wasn't actually the owner of the target site and he did that so someone like you would screw over all of the innocent parties who happen to involved?

This is a problem Google needs to fix, hackers aren't going anywhere and god knows teaching them a "lesson" isn't really a good solution most of the time, black hat morals being what they are.