Google Search serving up malicious sponsored ad pretending to be Maps (opens in new tab)

I'm surprised Google let's users create pages (and thus running user supplied javascript) on sites.google.com domain.