Seems that Safari has a flaw allowing the browser to become a zombie (usually has NSFW ads,) even behind a firewall, essentially.
Well, the desktop version was fixed, but the iPad and iPhone? Still vulnerable.
I’ll stress that merely having the security flaw isn’t being evil, but when fixing it, not fixing it on a platform that’s also affected (and was shown in the initial disclosure) is evil against the entire Internet, and against customers of the platform.
Especially given AT&T’s new 3G limits, that’s just lovely.