content: given a system that works but is insecure, and a system that is insecure but useless, people are generally going to pick the system that is secure  I'm guessing you turned yourself around somewhere in that sentence.  this is going to cause problems down the road ... for anyone who wants to use software that a large organization does not authorize.  It's important to distinguish between requiring authorisation for use on a platform, and having your de facto authorisation revoked because your technology is a shitty one. Flash is constantly being updated for security flaws. There's literally not a week that goes by without an update on that front.