If the user doesn't want their posts to be visible to the public, surely they shouldn't post them as public posts?
I understand the point you're making, that people may not want posts visible outside Mastodon, but I don't see how that's connected to embedding.
A public post is visible to the entire internet whether it's embedded or not. If you don't want that, you should not post using the public setting.