Funnily enough, MailOnline had the same problem and also implemented VPAID for VideoJS

https://github.com/MailOnline/videojs-vast-vpaid

I really hoped that the Guardian and others were going to create their own safer (no pron/malware) and faster (less RTB) network and cut out much of the cruft when I read about Pangaea last year. Looks like it's more about sharing data though :(

http://pangaeaalliance.com/