I think it is fair to pin this on Google, Meta, X, and any other ad networks that seem to have no control over their own platforms.
They're like Dr. Frankenstein, creating a monster and then just letting it roam the countryside. But worse, because they profit (immensely) from the chaos their monster wreaks.
Pin it on Google, Meta, X, etc, and also on the sites that display malware ads to clients. They're all culpable.