[smagin]

Why would you need that?

Also, one thing I can speculate that phishing would become even easier if such things were allowed

[yoavm]

Because defaulting to NOT allowing cross-origin requests made it so that being lazy creates a more closed web. And people are lazy.