I don't think the blob storage APIs (which this seems to be using, instead of accessing over the web-gateway urls) are CORS accessible. So you might have to proxy it.

However, it might become possible to run datasette etc much more easily in an edge function.