It is now possible to control the web embed rendering. To comply with data protection restrictions you can set showWebEmbeds to consent_handling or custom_consent_handling and web embeds are rendered with a preview unless the user gives consent.