Anger towards browser developers or HTML5 is misplaced; you should be angry with Adobe for the fact that Flash is buggy, insecure, and closed-source.
I agree, which is why I wish browser vendors would block WebGL by default.
I'm not holding my breath though, because the reality is that market demand from people like game developers (or at least, perceived demand) is what is driving the addition of so many complex new APIs to the web.
You can go into add-ons and make it click-to-activate like flash, however.
The sooner Adobe abandons the dead horse, the better for all of us. Kevin has gone away for years now, and Adobe's force is not based on Flash anymore (disclaimer: I own Adobe stock)
Unless you count iOS, Android, BSD, Solaris, QNX, Debian etc.
https://support.mozilla.org/en-US/kb/set-adobe-flash-click-p...
I feel your pain. The university site I'm working on has flash protein visualizations. We're finally moving visualizations to js. We'll get there, but with flash being kinda turned off, users will have to turn it back on manually or our pages won't work till rid of flash.
To quote a Chrome developer: "Click to play is not actually a security boundary. In particular, it has always been subject to click-jacking."
And calling it unsafe, well, that's the truth.
If you think unwanted annoyances only come from Flash, you're mistaken.