Maybe not "spotted" an ad while browsing Facebook (since even with uBlock Origin, FB is ruthless at shoving Sponsored posts into the feed), but certainly clicking on an ad disqualifies one from being able to claim "I am cautious with account security."

That was like, the #1 rule I learned in the 90's: don't click on banner ads unless you want to get a virus or get scammed, what the heck.