“CORS enables you to securely do this. Don’t hack around it!”

Zoom once shipped a localhost web server and hacked around CORS with an image trick, and it left millions of webcams open to any website. Developers treat CORS as an obstacle to defeat instead of a fence doing its job. Half the top Stack Overflow answers tell you to disable the protection that is trying to save you. The browser was not the problem. The workaround was.