The YouTube issue isn't a bug in the WYSIWYG editor, we are using the extension on a couple of sites with no problem with YouTube embeds.
As Clark said above, it's a problem with your security headers, I can't remember the solution of the to of my head, but I'll take a look for it.