Yeah, that was the first thing they mentioned in their requirements is dealing with malvertising.

I didn't get to the section that covers how they met that goal yet, but if you are interested I can let you know what their approach is so you can see if it sounds sufficient.