Yes. If you're trying to build an honest ad network, you're not going to do that; but you still have to worry about leaking information to less honest clients.

Yes. If you're trying to build an honest ad network, you're not going to do that; but you still have to worry about leaking information to less honest clients. If the information is in the browser, someone will try to exfiltrate it.