Well, the codebase existed long before HTML5 was supported by pretty much any major browser (remember, HTML5 didn't really stabilize to the point an enterprise could use it until 2012). So you have to continue adding to it while you wait for HTML5, and its popular frameworks and libraries, to come to fruition. Oh, and we're an enterprise SaaS app, so all of our customers run on whatever version of IE was released 4 years ago.
If all your customers are enterprise and running from within that environment only, would they not be able to enforce a group policy where flash can only run for specific domain names?
