Flash has had vulerabilities and executes arbitrary code as well... What's the difference?

It sure has! But it's nice to expose oneself to vulnerabilities only when absolutely necessary (e.g. to view a single video), rather than for every page currently loaded for a site.