A visible remote image can still block canvas export

An image loads in a page. Drawing it onto a canvas also appears to work. Then the export throws a SecurityError. A visible picture does not establish that the application can read its pixels back. Bro