How does that happen, I thought the referer header was set by the browser how do websites impact what is sent in the context of an embedded YouTube video? If a website could fake their referer header that could be a security risk

I think you probably have another plug-in that was blocking the headers from being sent in the first place... Or maybe some sort of browser setting