This isn't about having ads (though that still sucks) this is about again, company endorsed malware.

If they're gonna shove ads in email, they need to have the quality control to not have misleading and harmful ads placed in there. Again, think of this as the charged lemonade situation, just because the user can technically avoid the risk, doesn't mean they're exempt from reducing the danger they put their users in.