Promote uses a safety certificate that encrypts the site. You can check this by taking a look at the URL, which starts with https instead of just http. When you want to embed Iframes in Promote, you need to embed links that have https as well. If you don’t do this, it might not work to embed a video, for example, and you’ll get security warnings etc.
Also ensure that the video you embed is public and not behind login