[arkadiyt]

It does not require CORS (cross origin resource sharing), it requires COEP/COOP.

[lights0123]

Yes, but because it did not require COEP/COOP, it allowed websites to break CORS policies through Spectre.