I have recently started seeing interactive ads in free applications I use on Android. I'm used to ads that come in the form of images, gifs or videos. Now, a lightweight, seemingly HTML5-compatible version of a game being advertised is automatically loaded, ready to be played. The only mention of any security implications connected with these interactive ads are outlined in this article.
What are the security risks of malicious interactive ads appearing? Are there user practices (not clicking, closing, configuring any settings) that mitigate the risk?