I think you don’t see ads that are served in there. Those are outright scams like fake investments and not just crypto but outright “buy big company X shares to get rich, photo of celebrity” with celebrities not even knowing they are used for those scam ads - meta doesn’t do shit about it.

Zero click malware would be most likely too sophisticated.

You click the ad contact people who will tell you where to wire money that’s the level we are talking about here.