Having it off by default is only good security - if one wants it on, then one should be aware of potential risks - much better than finding out the hard way that a bad site had automatic access.
This isn’t a prompt for an update. It’s asking me if I wish to INSTALL Flash. Which I already have and it works just fine.