Well, the CORS thing is just your browser protecting you from an XSS attack. So the API just needs to advertise the origins that are permitted. Like writing "stolen from xyz" on your tools.
The tricky part with electrical will be which things get missed. Like finding out the microwave has its own circuit that's shared with the bathroom fan or something. What you could do is buy 50 IoT devices and record which ones connect to your wifi after you start flipping breakers. You might be able to do some clever bracket to determine which outlets are on which circuit, but hardwired appliances will be more manual.
Look, if it was a random kid on tiktok that's one thing, but slinging (potentially) slanderous information around (and publishing it, technically) is a serious matter with real-world consequences. If someone made a blog post about how you torture animals and have a horrible taste in music, you'd probably want to do something about it.