@gloriouscow I don’t know about canvas specifically, but often limitations on the ability to read content trace back to Netscape’s approach to web page security (“there is none”).
In 2012 browsers allowed any random web page (perhaps one modified in transit by your ISP) to load any other (eg your bank’s account summary page) in an iframe and the browser would happily supply your bank login session cookie for authentication. Web apps commonly relied on this ability.
If random web page was allowed to read contents, (perhaps via CSS, WebGL, or who knows what other APIs) that would obviously be a disaster.