[array-species]

Great point. It is using cloudflare stream.

https://developers.cloudflare.com/stream/viewing-videos/usin...

Open to any recomendations for alternative as i too am quite displeased with the state of such things. But still prefer it to YouTube.

I believe the media server is set to reqire referer to prevent embeding on alternative origins.

[amarshall]

Seems to be https://developers.cloudflare.com/stream/viewing-videos/secu.... Probably can be disabled and replaced with short-lived signed tokens. Though perhaps CloudFlare could have used [more modern iframe restrictions][1].

[1]: https://w3c.github.io/webappsec-csp/#frame-ancestors-navigat...