> This is how all other APIs in browsers work due to security and privacy concerns They're probably comparing it to the fetch and XHR APIs, which both allow cu

> This is how all other APIs in browsers work due to security and privacy concerns They're probably comparing it to the fetch and XHR APIs, which both allow custom headers.