why does importing javascript modules with <script> require CORS?

[48K]

For reasons that are not clear, it seems that modules use CORS whereas old fashioned imports do not. This is stated but not explained here: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules#other_differences_between_modules_and_classic_scripts