Then enable it for those sites. Defaulting to enabled seems like overkill.

On the other hand, I'm pretty sure my browser asks me every time it wants to run an applet, so I think that as current behavior is fine.