Youtube offers privacy-enhanced option for embedding and it would be great for user privacy (and GDPR/CCPA) if Tribe defaulted to this method of embedding. The only difference is the domain Yotube uses. For the privacy-enhanced method, it uses youtube-nocookie.com So it should be a quick and easy change.