It won't be different from any of the other silicon valley companies that went public based on numbers inflated by click fraud, but it may be one of the few that gets caught for it.
yes, ads can be GDPR compliant. Consider search ads. They are shown based on the keywords being searched by the user, no data collection needed for search ads to work really well.