Style comment: without reading the linked article yet, this sentence felt like a bit of a non-sequitur from the previous one. The connection wasn’t clear to me. If the websites are vulnerable themselves, isn’t that unrelated to advertising? Unless they’re only vulnerable because of the advertising… *reads the paper* okay, that makes sense.
I’m probably just bad at reading, but it might be possible to make this clearer.