One sort-of-workaround is to enable plugin click-to-play. It's less convenient, but it has other advantages. It prevents Flash content from annoying you unexpectedly (such as on every band website ever). It also adds a small bit of safety if there's ever a 0-day for Flash. Instead of getting exploited as soon as you visit any infected page, you'd at least have to click on an embed that you wanted to watch or play.

Unfortunately, this doesn't help for sites that use HTML5 for media. As more sites start using HTML5, I think demand for a ClickToHTML5 option/extension will rise.