I'm not fine-tuned on knowledge of CORS.
But there were some articles on how disabling CORS resulted in stolen bank accounts in India.
But they were also from 2019. Can't find 'em offhand, may look again later, probably not important.
I myself do not plan on disabling CORS just for the sake of ONE website (that and I doubt I'd ever visit again anyway, despite it is a bit cool for looking up forgotten music, but I can find the same info from sources that do NOT require me to DISABLE security implementations that have been around since the 1990s).