The problem with CORS is that most people do not understand it and will not bother the change anything to make life easier for other developers. At least, stati

The problem with CORS is that most people do not understand it and will not bother the change anything to make life easier for other developers. At least, static files open to the public shall have 'Access-Control-Allow-Origin' set to '*' by default. Vercel and github page do that already which is nice. Most other web host don't, Not even Netlify, who supposedly advocates for the JAMStack. For dynamically generated content, the site runner should also consider open up if the content is for public consumption and not varying by user's credential.