A possible workaround. I created a Featured Ad Widget in the SBS Widget Pack - Plugin that can be more or less used as an HTML Widget. It doesn't do scrubbing as it pulls it's HTML from System Properties which are implicitly protected by Admins. Not sure if this helps, but thought I'd mention.
Whenever I try to sneak a <script> into the html it deletes it after I've saved the changes.
What am I missing?
Thanks and Cheers,