From a security perspective, it’s axiomatic that you can’t make a client behave in any particular way; we just assume the client is hostile.

I've dealt with backends that refresh a CSRF token on each valid request and return it in the response as a cookie. In those cases a solution like this may be needed. Not optimal but, we don't always have control over the backends we use, especially then they're provided by a third party.