Answers are grounded in this paper and cite their sources.
We analyze the software stack of popular mobile advertising libraries on Android and investigate how they protect the users of advertising-supported apps from malicious advertising. We find that, by and large, Android advertising libraries properly separate the privileges of the ads from the host app by confining ads to dedicated browser instances that correctly apply the same origin policy.
No takes yet. Share an insight, caveat, or question.
Son et al. (2016) studied this question.