There's a reason I specifically called out getting rid of flash. Every legitimate website should be going to HTML5 if they aren't there already. There is no reason to be sticking with flash exclusively in 2015. It's vulnerable but at the same time doesn't give you anything you can't do in a more safe framework. It is a relic that needs to die sooner rather than later. If a website isn't switching over, you have to ask yourself why.
And yes, I know there is a huge code base for flash based games and the lot. But that's no reason to refuse to switch over to a better platform in the long term. It may take a while to move everything. But if they're not making the effort to move to a better, more secure platform I question their motives.