It's bullshit that users can't allow web apps to just fetch whatever URL they want and bypass CORS restrictions. Like, just strip any cookies from the request and let me get that data already!