"...run-of-the-mill sites." Highly doubtful. Someone running ads on their site doesn't make them suddenly complicit and knowledgeable about the creepiest corne

"...run-of-the-mill sites." Highly doubtful. Someone running ads on their site doesn't make them suddenly complicit and knowledgeable about the creepiest corners of ad-tech. This is _exactly_ why knowledgeable regulators should make this illegal - this is a situation where the people on both ends are unaware of an explicit MITM attack happening between them.