Websites still find their way around this setting. I think they put an overlay on the page and intercept the first mouse event they can, and use that to start playing the video.

I usually just blacklist these websites in my Pihole.