For desktop we can enable COI with COEP: credentialless. That's possible because chromium supports this new/proposed header value which relaxed loading cross-origin resources lacking the CORP header.