Base access checks on embed buttons instead of filter formats

d.o issue: https://www.drupal.org/node/2362897
No, the admin permission is used for any operation as fallback. You should change _permission to _entity_access: 'entity_embed.edit' and then it will be used (not here), and you must call the parent (here), not doing it is wrong :)