Facebook has some security flaws in how it displays adverts. Granted it's the job of ads to be enticing and click-baity, but there needs to be some basic checks, or it opens up a new phishing avenue.