Thanks; #1 is the most persuasive argument for the type of site I'm envisioning (and likely massive part of "remaining 15%"). While a lot of other arguments in comments are not persuasive because they don't seem a feasible or relevant threat vector, a non-specific, generic injection of ads/malware makes more sense as a legitimate threat vector such a site could get caught in.