Blame it on Facebook and Google. All they care about is money and not the safety of the users. Why they don't moderate scams, malware, phishing links that use their platforms to advertise like the way they would moderate explicit content or "hate speech" is beyond my understanding.
Such ads shouldn't appear anywhere on social media, if only they were not greedy companies.
We can blame them all we want, but the fact is that they don't care about the end user, and that legally they are fully insured in case someone sues them for financial damage. It all comes down to the fact that everyone needs to be careful about their actions, whether it's on FB or this forum, because that's unfortunately how the internet works.
The only way to suppress such advertisements is detailed checks by all these companies, which they do not want to carry out because on the one hand it is too expensive for them, and on the other hand they would lose too many clients. It has been my decision for a long time not to use FB and similar social networks, not because I am afraid of false advertisements, because it has already been scientifically proven that they are extremely harmful for everyone who uses them, especially for children.