Foundries license fonts for a specific domain. To help sites to respect
those licenses, browsers repurposed CORS from a security tool to a "let's
help sites to compliy with font vendors licenses" tool.
Nasqueron assets host only open source material, and as such,
there is no need for such restriction.
References:
- https://bugs.webkit.org/show_bug.cgi?id=86817
- https://drafts.csswg.org/css-fonts-3/#same-origin-restriction
Ref T1881.