Google owns DoubleClick which is the biggest adserver on the planet and the #1 source of all the bad intrusive ads in the first place. This could've been easily solved years ago.
Most people think Google's push for HTTPS, both in Chrome and SEO rankings, is somehow related to privacy.
It's not. It's about net neutrality and it's about third parties being able to switch out Google's ads for their own, on-the-fly, using a middleman.
I interviewed with a stealth-level startup a few years back. They were developing a product, similar to a WiFi router, that would be installed on premise and sit there, filtering out Google/Facebook/etc. ads and replacing them with ads that the owner of the box wanted. You can imagine this box being installed in Starbucks, airports, libraries, and everywhere else. Cutting into a massive chunk of Google's ad revenue.
The Time Warners, AT&Ts, and Verizons of the world would also be doing this, for HTTP traffic.
We are getting the benefits of privacy. But it's not because Google has good intentions.
Funny, I was a similar boat once. They weren't a startup, yet. Good for them, because in both meetings I had to tell them their business idea was impossible unless they broke prime factorization. I was surprised I had to meet them the second time.
Oh, and their business idea was a little more intrusive than merely replacing ads. They wanted to be able to read people's emails and Facebook data and serve targeted advertising based on that.
[1]: https://support.google.com/webtools/answer/7347327
Google and other major ad networks all have the same policies as it provides PR insurance and plausible deniability for their clients. However, they absolutely do not enforce these rules to any reasonable extent which is not only an open secret in the ad industry but incredibly easy to test and prove yourself.