It was because of 'security', which was never explained. And it doesn't make much sense when other browsers can and do alow it. I'll see if I can dig up some historical links if I remember tomorrow.

Last time I checked,there was still no acknowledgement of it and appeared to be no intention of ever addressing it. The fact that they're now telling people to run a webserver suggests that nothing has changed ☹️