This isn’t an exploit per se. it is a misuse of a feature. Google has long allowed the display URL to differ from the actual destination URL, and if this weren

This isn’t an exploit per se. it is a misuse of a feature. Google has long allowed the display URL to differ from the actual destination URL, and if this weren’t the case this would cause significant problems for advertisers because many link their ads to offsite tracking domains. It’s a feature, not a bug.