[rnotaro]

I'm pretty sure they understand that since they wrote that the resources will need to be proxied.

They just want to prevent hotlinking/leeching.

[masklinn]

SOP does not prevent hotlinking in the first place, a hotlink is simple request (the most simple if anything), CORS isn’t going to be in the path at all.

[trick-or-treat]

Hotlinking/leeching applies to img or media assets, CORS offers NO protection from that AT ALL.