> Serving malware is a criminal act and you can block it, but you're also not usually going to CNN.com and expecting them to download a crypto miner on your hardware. You are, however, expecting advertisements, hence why you're using an adblocker.

I absolutely expect CNN, Google, and any other website to serve me malware. You can find many historical examples of the largest ad networks serving up malware on just about any site in existence. So that is actually the primary reason why I use adblockers, and blocking the visual noise is just a nice side effect.

How should I legally/ethically block this malware without using a broad ad blocker? AFAIK there's no way for me to know ahead of time when and on what site malware will be served.

I'm sorry if you think I'm painting in strokes that are too broad -- I'm trying to understand your viewpoint here. I would also like to be clear that I do think copyright infringement is a thing, and in your example of "pay me $1 and you can view my art," viewing the work and not paying is ethically dubious and probably could be considered copyright infringement in most jurisdictions. I just vehemently object to it being called "stealing" as you've done here.