Hacker News Reader

Why would you need that?

Also, one thing I can speculate that phishing would become even easier if such things were allowed

Because defaulting to NOT allowing cross-origin requests made it so that being lazy creates a more closed web. And people are lazy.