I'd argue that this is much worse in a different way. Imagine the website the ad points to is malicious and manages to install or exploit something. Outlook h

I'd argue that this is much worse in a different way. Imagine the website the ad points to is malicious and manages to install or exploit something. Outlook happily displays and opens this without confirmation, as long as you pay them for it.