Modern advertisement is malware.
An ad-blocker /is/ security software. You don’t have to take it from me, you can read from the Cybersecurity and Infrastructure Security Agency
> AT-A-GLANCE RECOMMENDATIONS
> Standardize and Secure Web Browsers
> Deploy Advertisement Blocking Software
> Isolate Web Browsers from Operating Systems
> Implement Protective Domain Name System Technologies
Literally their second recommendation on this pamphlet about securing web browsers: https://www.cisa.gov/sites/default/files/publications/Capaci...
Moreover you don’t even need a 0-day to fall for phishing. All you need is to be a little tired or somehow not paying attention (inb4 “it will never happen to ME, I am too smart for that”)