Won't they just add "allow=all,the,crap,they,want" in the embed iframe code they ask site owners to copy/paste? I'm sure there's a reason for the design (allow

Won't they just add "allow=all,the,crap,they,want" in the embed iframe code they ask site owners to copy/paste? I'm sure there's a reason for the design (allowing deny all at the top and then only allowing what's specifically needed is nice), but I'm not sure what it'll actually do for the case where an iframe is just a copy/paste embed and can use the allow attribute for whatever it wants.