Contextual ads can be privacy preserving. As in Netflix ads in a entertainment page. The problem is targeting the ad on people, and not on content.

And PDF on mobile is so slow…

Authentication bypass should give you interactive access. “I’m in” like. Remote code execution only allows you to run a command, without permanent access. You can use some RCE vulnerabilities to bypass authentication, but not all.