Where are you getting a non secure link from? Just checked and should be using https in both js and source code.
Is this the auto post merge or manual one? I can't seem to reproduce this.
Just how many videos are we talking about? i assume all Youtube as well? I'm looking into the quote issue as can reproduce that but not the merge issue.