Apparently there's http://youtube-nocookie.com/ that doesn't do that, but of course that's not the default.

Someone just pointed out I have the same problem on my blog and I'm very pissed. It's not enough that their embeds break every Lighthouse metric and recommendation. It's all this, too