“Setting plug-ins to click-to-play means the user must manually activate a plug-in when a web page attempts to use it. It’s a security measure, allowing users to pick and choose whether or not specific plug-ins get to run.”

 

Link