The main security benefit of click-to-play plugin schemes is not to question the user about the security of an object, which is unknown in most cases anyway, bu

The main security benefit of click-to-play plugin schemes is not to question the user about the security of an object, which is unknown in most cases anyway, but to prevent accidental drive-by loading and other annoying (and risky) usage. Clicking an overlay to run a plugin should be as natural as clicking on a video to begin playback.