We don't know for sure that they won't do anything funny with CORS yet, for example We'll wait a bit longer