I disagree. Case in point: there are websites that sell ad space the "old fashioned way" meaning they're directly paid by the advertiser, they get a predetermi

I disagree. Case in point: there are websites that sell ad space the "old fashioned way" meaning they're directly paid by the advertiser, they get a predetermined format and placement, text-only with a link. Absolutely no JS, no tracking. If the advertiser wants to track visitors, they create a single unique landing page for their link. This is 100% acceptable to me for the following reasons: first, these site owners fully control the ad presentation on the site, and there's zero possibility of unvetted JS going through because the advertiser delivers plain text to a knowledgable human publisher who is the one who will run the placement. Likewise, the advertiser gains no knowledge of visitors who didn't elect to click the ad link and visit their site. This gets to my comments above: the quest for a fully-scalable inventory of both eyeballs and advertisers is a hugely corrupting influence on so many levels. Small companies wanting to build relationships to help each other, without exploiting visitors in the process, is OK in my view.