Banned for performance?

Does google ban/disapprove your ad for malicious software/circumventing, if you have a high click thru rate?

Yes, Google can deff disapprove your ads for malicious software or trying to bypass their ad review process, even if you have a high click-through rate. To fix it, use a malware scanner, clean up your website, and contact Google Ads Support for a scan. Don't forget to take screenshots to prove your domain is clean.

Yeah an outlier high CTR will definitely trigger a review

The reviewers use residential IPs, so really hard to block them. You gotta do all you can to avoid tripping any reviewer alarms