They clicked the install button of an ad, that’s the whole point, what a weird specific detail to get hung up on anyway even if you were not wrong (which you are). It’s not just an annoying ad, it’s an ad hidden as actual results of a search with an identical install button. Google is to blame for that style to clearly try and cheat people and they deserve all the backlash and fines and more for it. But clicking a button that says install without checking what it belongs to is beyond ignoring any basic security, it’s simply stupid, and that’s on the user, not on google.
It was already tough being in a world where it’s hard to see the difference between the onion articles and actual news. Now we’re on a completely new level where news can be the result of playing CAH. It’s kinda funny until you stop to think how terrible it is.