Mod note: This question is about why XMLHttpRequest/fetch/etc. on the browser are subject to the Same Access