"Click To Play" Arrives In Firefox

**Executive summary:** This article examines browser plugin security and the "Click to Play" mitigation, explaining how running plugins only after user interaction can prevent invisible plugin-based exploits; it evaluates the feature's limited adoption and discoverability in Chrome and Firefox, notes UX and compatibility challenges (such as iframe-embedded Flash and legitimate invisible plugin uses), and recommends broader default enablement to improve user protection.