We all know this is not generally true. Ad networks will even explicitly allow advertisers to inject their own unsandboxed js. And so will publishers. But hypot

We all know this is not generally true. Ad networks will even explicitly allow advertisers to inject their own unsandboxed js. And so will publishers. But hypothetically if this was true still doesn't make a difference, adtech is pretty negligent of security.