I have in the past, I'm not actively involved with the platform though.
It's extraordinarily doubtful that they could inject an IFRAME into the CMS page but couldn't use the embed code. The embed code is just a form element, remote JS file and local JS to inject child elements into the form container. This could be done with a macro/partial, etc.
.png)