Yep, one of the big problems is the penalty for any corporate crime today is not enough. Often the crime is more profitable than the penalty hurts.

If you want to fix ads, make a malicious ad cost the ad network triple the amount they got paid to display it. Corporations are psychopathic by design, if you want to fix them you need to make it an actual financial risk to do something bad.

And then heck, if you want to make stopping the original bad actors more effective, make the platforms pay up those damages but empower them to recover that loss if they can get it from the malicious advertiser.

You'll see platforms doing more vetting of content, doing more KYC, and focused on reducing their own risk.