not sure what CORS rule they have but in edge apps most likely your users will run AI API directly from their devices so not like their key will be used more than on few edge devices they have.