Yup, they can block your domain from embedding if they want.