Exactly, for this they'd need to run an ad blocker and a script blocker, such as uBlock Origin and NoScript.