My understanding is that they should be. This also appears to be the only path through <embed> or <object> that doesn't call .lower() on the incoming MIME type. See attached test case.
Created attachment 200250 [details]
Created attachment 200253 [details]
Created attachment 200254 [details]
with test case this time