Mozilla was blocking all Flash until the second update came out. The page https://www.mozilla.org/en-US/... clearly showed that. You could change it to from "disabled" to "ask to activate" if you chose to.
Chrome also updated today, but the bundled Flash player in Chrome is click-to-play by default. IE should do that with its bundled player. And Microsoft should use Windows Update to block the plugin player for old version of IE. And old Java in any browser, with an override available.