I think it is a good idea to have ability to add trusted domains for webflow api to your account for avoiding CORS issues.
If we use ajax requests to get collections info from webflow-api we have to use some proxy because of CORS or use backend methods. Its a common situations for sites without backend, for example angular based sites.
I think it can be a section in account settings where you can add few trusted domains: dev, test and master for example.
You can set them and use ajax request from these domains without proxy or special backend services :)