Iframes can be blocked quite easily from the origin, so it’s only a solution as long as they deem it to be. And many sites block by default. Would there be an

Iframes can be blocked quite easily from the origin, so it’s only a solution as long as they deem it to be. And many sites block by default. Would there be any way for the origin to block an unwanted CNAME?