You are supposed to debloat all the malware that comes with your phone, courtesy of the manufacturer. If you are not capable of that, or don't care enough to have someone do it for you, you'll have to get used to ads. Annoying ads are considered a feature on stock Android builds.

Installing an app that pop-up ads isn't malware. The security model worked just fine.