Comment by bonestamp2

My favorite is the one that disables CORS... makes it easy to write local clients/tools that can get data from anywhere:

--disable-web-security