If HTML tools could make network calls (CORS be damned), they could replace a huge portion of hosted apps.

I'm tempted to run a CORS proxy somewhere - maybe on Cloudflare Workers - but I'm nervous that any open proxy is liable to be abused.

I could do an authentication protected one that only I could access though...