It's inconvenient for sure but I've never dug deep into this the issue. My guess is that it's related to subdomains not guaranteeing to be from the same origin

It's inconvenient for sure but I've never dug deep into this the issue. My guess is that it's related to subdomains not guaranteeing to be from the same origin. The result is that people run into errors, Google them, copy paste the top SO result which advices to allow * Doesn't seem ideal