Re: Your JS can KMMFA.
I can help what that.
Ask them what liability they accept when their ad network serves you malware. (You don't actually need to do this... just run through the mental exercise.)
They will tell you that they have nothing to do with the ads that are served, it really has nothing to do with them, and accept no responsibility let alone liability.