You setup CORS on your backend, it does not matter where or how you frontend works.

IMO biggest problem is that if your website is public facing, then just having an SPA is bad for crawlers and not great for UX.