I would just like to point out that this was one of the things that the AMP straightjacket prevented. The whole online news industry has conclusively demonstrated that it can't be trusted with javascript and must be hospitalized, but they refuse to acknowledge their own illness.

Is it news sites fault or is it the fault of web standards/browser developers for failing to build any viable mechanisms for monetizing content?

The issue is hardly isolated to news outlets. It's endemic to the web.

AMP sites listed on Android Assistant routinely messed with back button behavior to trap you.