CORS write capability

Basically begin able to cros write will allow developers to develop 3rd party clients for sites that dont use merger hubs

like for example:
zerotalk custom client
or zeromail client or a multi mail client that wants to support zeromail

i can understand the possible security concerns but it should be like how it is for "admin perm"
something that's marked as somewhat dangerous
we already have admin so why not this? another permission node to allow sites to fine tune things