It was disabled intentionally because it was a security risk. <embed> and <iframe> tags, used to embed videos, and other HTML tags can be used maliciously for purposes of Cross Site Scripting (XSS). So far we had only seen people exploit this to be an annoyance and not do anything severe.