I've seen suspiciously more malicious ads on older users phone (e.g., click to update Chrome ads) especially in-app ads.

You can target by specific system or even a version. This is simply google tolerated malicious behavior because it brings them revenue.