Yes, normal browser security restrictions mean one site doesn't have the necessary access to another site. A browser extension can bypass these security restrictions (which also means you have to trust the extension's developer, since the extension has unrestricted access to all sites you open in your browser).
You'd get a popup telling you to enter your remote username (with autofill enabled), which then would redirect you to your actual instance to then handle the subsequent authentication and following process.
Gargron for some reason scrapped this modal when releasing 4.0s new UI (and in addition the suggested new method by copy-pasting URLs breaks remote following support in Misskey and Pleroma since those don't resolve raw WebFinger links out of safety concerns).