Ironically it's only really people who heavily ad-block/privacy-protect that get these scam/malware ads.

When Google has no profile on you, your view is virtually worthless, so it's only bottom feeders that bid on those views.

Average users get Coke and Tide ads. Its usually the most technically adept that get the worst ads, and usually they just turn their ad block back on.