im in a love or hate relationship with the CORS policy, its intentions are good, but it’s easily bypassed so it ends up just confusing new developers and annoying everyone else.
My opinion on cors:
[Access to fetch has been blocked by CORS policy: No ‘Access-Control-Allow-Origin’ header is present on the requested resource.]