Honestly this really is the problem and honestly when I first read it I thought you were arguing against ad blockers. Having to have subscriptions is ridiculous, which is why ad supported really is the only currently realistic model for the majority of the internet. Everyone seems to be so concerned with security so instead of reaching for the nuclear option of just not paying people who provide us content why don't we actually think about how to make them safer? What would an ad network have to do to make you allow them through an ad blocker?
There's absolutely nothing they can do. If I can hide ads by any means, I will do so. I absolutely hate them. They slow down page loading and rendering, they slow down my browser, and they're tacky and distracting. I a few options:
1. A system of micropayments so I can pay cents or fractions of a cent for page views, ad-free.
2. Blocking content as well if an ad blocker is detected. I'm fine with this; my stance is that if you send me data in response to a GET request, I can do anything I want with that data, including stripping out portions I don't want to see. If you block the content when detecting I'm blocking ads, that's fine; I'll accept that and not try to circumvent it (and will likely just do without your content).
3. A general (monthly-subscription-type) paywall. I'm unlikely to pay for this, as there are few (no?) sites I read often to justify the expense, so I'd again just do without.
And I think that's the thing: there are enough people who don't block ads that they're apparently still profitable enough that sites that would prefer to charge for content can't see doing so as a viable business model. I look forward to the day when selling advertising is no longer viable, and something like my #1 idea takes hold.
Suggesting that it's immoral or unethical to block ads is just hogwash.
1. No videos, flashing animations, pop-overs, pop-unders or audio. Ever.
2. I WILL tolerate text, links, and moderately sized images.
3. No building a dossier on me. I may allow tasteful ads but I will still block trackers and analytics with extreme prejudice.
And why should people who can't afford to pay, or wish to not have their money benefit someone, be forced to be opened up to security exploits?