"Only allow play of audio in response to user action."
Okay, cool, so there's a giant 'click' event handler on top of the whole page. When you click it I'm going to play a 250ms long sample of silence embedded as a data:// URL into the audio or video element.
Now I control the player and can do whatever I want.
You've inconvenienced me for 15 minutes.