Actually surprised this is possible in crossdomain. Almost everything else through is locked down otherwise. Anyone know why this isn't considered a bug and fi

Actually surprised this is possible in crossdomain. Almost everything else through is locked down otherwise. Anyone know why this isn't considered a bug and fixed? What is a legit use of a window changing it opener location crossdomain? I get it in the same web site / app.