It's the lowest level. Applying this to, say, medicine is like trying to understand a React app in terms of a Turing Machine. It's involved, but it doesn't help because of all of the extra rules (which are not fundamental properties of the Universe or of mathematics) that we add on top. CORS isn't a fundamental law of the Universe, but all major browsers enforce it, so you have to deal with it.