When I worked in adtech, I proposed a simple solution to ad fraud on our platform - assume any UA coming from an IP range owned by a cloud provider was a bot and don't show them ads, don't count their impressions. Worst case, people using a VPN hosted on EC2 might not see an ad, but I was certain they'd cope. Best case, higher quality traffic increases yields. The business team vetoed that, it would adversely impact…
So much about how terrible things are in general can be tied back to this one simple concept.