Bypassing it all (be careful) with no-cors? Relatively recent Chrome debug messages about a no-cors "opaque" option, suggest the client has the ability to bypa

Bypassing it all (be careful) with no-cors? Relatively recent Chrome debug messages about a no-cors "opaque" option, suggest the client has the ability to bypass the server rules without using any kind of proxy. Is this true? Maybe I didn't notice it got added as an option when fetch was added in addition to the old style XHR requests?