> filter malicious ads out of their own ad services

It's worse than that. Google turned their exploit delivery platform into Google Tag Manager so they can be employed on more than just ads.