At some point soon, I intend to block Flash at our corporate firewall. I know I will hear a lot of wailing, but I'm very tempted to see how broken the web will be for our users.
If the C-suite folks don't scream too loud, I might get away with it!
I demanded that our in-house web developers remove flash from our sites years ago. There was a lot of whining about it but I simply told the developers that I'm going to block Flash access to our sites on a specific date. I told them that when some executive asks why our sites are broken, I would send them to the web developers.
I've been putting a lot of pressure on any vendors still using Flash. We'll take our business elsewhere, kind of pressure. Some are complying, some aren't.