That theory works until someone notices that the extra clicks aren't leading to anything else, complains about click fraud, and then the website is penalized with fines, account suspension, etc. That small site likely won't even have the resources to defense themselves effectively.
There's also an interesting security question: do you really want to automatically click on the next zero-day deployed through an ad network?