You are still thinking about a server checking if a browser is trusted to run some code on a server, when the CORS is about a browser deciding if it should trus

You are still thinking about a server checking if a browser is trusted to run some code on a server, when the CORS is about a browser deciding if it should trust some of the server response.