I've personally encountered multiple hacked sites and zero malicious ads (so far as I know). Like I said, I'd be really curious if anyone has actual data on different exploit vectors rather than just arguing anecdotes.

I think my point remains, however, that if your browser can be compromised by visiting a URL then you are in a bad situation ad blocker or not.