Configurable iframe sandbox permissions in SiteOrigin Video Player

I am using the SiteOrigin Video Player widget and noticed that the generated iframe currently uses:
sandbox=”allow-scripts allow-same-origin allow-presentation”

Some security scanners (such as Acunetix) still report this as an insecure or overly permissive iframe configuration because multiple sandbox permissions are enabled.

I understand these permissions are required for normal video playback functionality, especially for providers like YouTube and Vimeo. However, it would be very helpful if the plugin allowed developers/site administrators to configure the sandbox permissions through widget settings or filter hooks.
For example, the ability to:
• customize allowed sandbox directives,
• remove unnecessary permissions,
• or apply stricter policies for self-hosted videos.
This would help sites comply with internal security policies and reduce automated scanner findings while preserving compatibility.