Comment by trick-or-treat

Hotlinking/leeching applies to img or media assets, CORS offers NO protection from that AT ALL.