so I asked the techies, and the consensus seems to be that the "object" tag, which is also used for video embedding, is a security risk: spammers could use it to embed malware rather than a video. We don't know how Facebook deals with the problem: with an elaborate protection or not at all. But, ET shall keep it safe and keep it to macros. But, in tonight's OT, I will request proposals for further video sites that could be enabled this way. *Lunatic*, n. One whose delusions are out of fashion.
Or malware in a video.
We're implicitly trusting that youtube, vimeo, google video etc are deploying a "clean" flash applet and not deploying malware to people's computer when they play an embedded video. A man of words and not of deeds is like a garden full of weeds; a man of deeds and not of words is like a garden full of turds — Anonymous