Under "Firebase Hosting Integration" (see https://github.com/angular/angularfire2/blob/master/docs/functions/functions.md#firebase-hosting-integration) you mention the possibility of avoiding a round-trip and other CORS-config.
This only applies to sites (firebase-)hosted via us-central1 though (firebase/firebase-tools#842), which I think would be nice to mention in the .md