In the sense that someone sending you a surprise crypto miner with their webpage or bundling a botnet trojan into a program they give you is just them putting it on their own space, sure. If they send it to me though, my security software will promptly filter it out or otherwise not allow it to run. My firewall will block connections to their known-dodgey payload hosts from all computers on my network. My computer is not for running someone's miner, and that's not the intended purpose of allowing scripting. Likewise, my screen is not for displaying ads; it's an abuse of scriptable documents that gets filtered out. Opening a web page doesn't create some obligation to run malware.

fwiw making an offline analogy, I also live in a city where outdoor advertising signs are generally banned (with some exceptions like saying the land is for sale, or small ground-level signs with height/width restrictions at an entrance indicating which businesses are on a lot), so even on their own land/their own space, businesses putting up things like billboards would be spam and disallowed.