The first time google served malicious JS on behalf of a customer was negligent. Maybe the second and third and fourth and fiftieth times too.

It's not 2003 anymore, we're far past negligence at this point.