"Only allow play of audio in response to user action." Okay, cool, so there's a giant 'click' event handler on top of the whole page. When you click it I'm

"Only allow play of audio in response to user action." Okay, cool, so there's a giant 'click' event handler on top of the whole page. When you click it I'm going to play a 250ms long sample of silence embedded as a data:// URL into the audio or video element. Now I control the player and can do whatever I want. You've inconvenienced me for 15 minutes.