It seems like a technical solution might work here: instead of opening the ads within the browser, open a separate, containerized browser and copy the ad link over there and open it, in the background, so any malware is unable to affect your data.