Or more problematically, inject a bunch of ads that lead users on to scams.

It would be ideal if people only browsed from trusted networks, but telling people "don't do the convenient, useful, obvious thing" only goes so far. Hence the desire to secure connections from another angle.