I usually block ads but I was on my work computer. I tried to send the link to a coworker and I was visiting the page to make sure it copied correctly. The first thing I saw was a big green "download" button that was a
really well disguised ad. My coworker wouldn't have been able to identify it as an ad.
I agree that the ads could be much worse and since posting I've taken notice to quite a few sites with almost the exact same layout for ads as the Cyberduck homepage. I think the difference is that most of those websites are blogs or tutorial sites that make their money from advertising, which is pretty standard. What irks me about the Cyberduck homepage is that Cyberduck requires payment on the App Store and Microsoft Store, the free version nags you to buy a license, and the ads shown on the homepage are not very reputable.
This is definitely not a huge deal to me, but I doubt I'll ever send a friends/coworkers the link to this homepage knowing that they might accidentally download something unintentionally. There are plenty of software shops which use alternate methods to drive revenue, such as limiting features available in the free version after 30 days (see BBEdit).
Again, I can't fault people for wanting to monetize their work. I just think there's better alternatives to make money than sketchy ads. IMO the ads on the homepage seem like a quick attempt to make a few more bucks. If nothing changes, so be it, I won't complain beyond this thread. That being said, I probably won't recommend Cyberduck to anyone unless there's a change purely due to the risk of downloading something unintentional.
Nothing against the developers or Cyberduck, I love the product!