Google Search serving up malicious sponsored ad pretending to be Maps

I'm surprised Google let's users create pages (and thus running user supplied javascript) on sites.google.com domain.