[deelowe]

Flash has had vulerabilities and executes arbitrary code as well... What's the difference?

At least with javascript, there's only one attack vector (the browser itself). Flash requires a plugin to work properly.

[zeveb]

> Flash has had vulerabilities and executes arbitrary code as well... What's the difference?

It sure has! But it's nice to expose oneself to vulnerabilities only when absolutely necessary (e.g. to view a single video), rather than for every page currently loaded for a site.