I'm completely with you on this one. I pay the bills doing computer forensics and defensive security, and the amount of times that I've seen clients compromised due to advertising networks serving malicious content is non-trivial. I'd recommend ad-blocking purely from this perspective.

When you have a single user the attack surface isn't so bad, but across an organisation of several thousand people it quickly escalates.