Great point. Reminds me of another issue: people who claim it's just about the malware are likely to be visiting arbitrary sites loading JS, etc from them. Plenty of malware risk there. Must be blocking ads for other, different reasons. ;)