Every site doesn't do that, though. Almost B2B (non-consumer) sites sell their ads directly to clients (major companies) and don't have malware come through. It's only the ad networks that really are guilty of selling ads to people they don't know and getting the bad creative. If ad blocking software was really about stopping malware they would recognize this and have a way of certifying sites that do business directly and don't allow ad networks.