It could be either way, I haven’t tried “vibe coding” but I imagine you’re right if you don’t tell it to explicitly deal with CORS, AI probably doesn’t