There should be a media play permission just like there is for accessing your webcam or showing notifications. You give the permission once to a website such as

There should be a media play permission just like there is for accessing your webcam or showing notifications. You give the permission once to a website such as youtube, and from them on videos would play automatically for the domain youtube.com. No videos would play on any website to which you deny this permission.