ServiceWorkers also don't play nice with CORS in my experience. We often need to bypass them in Angular when making certain requests.
Incidentally, while you're here, I'm planning on building something which will require use of SharedArrayBuffer. Will adding the (now) required Cross-Origin isolation COOP/COEP headers cause any issues to existing CORS setups?
:)