0 days exist and they are exploited in the wild sometimes

An ad-blocker /is/ security software. You don’t have to take it from me, you can read from the Cybersecurity and Infrastructure Security Agency

> AT-A-GLANCE RECOMMENDATIONS

> Standardize and Secure Web Browsers

> Deploy Advertisement Blocking Software

> Isolate Web Browsers from Operating Systems

> Implement Protective Domain Name System Technologies

Literally their second recommendation on this pamphlet about securing web browsers: https://www.cisa.gov/sites/default/files/publications/Capaci...

Moreover you don’t even need a 0-day to fall for phishing. All you need is to be a little tired or somehow not paying attention (inb4 “it will never happen to ME, I am too smart for that”)