For some reason, it seems like you can't include ESM modules from file://, it's only usable over http://, due to content security policy and CORS stuff...
What could <script type="module" src="script.js"> possibly do that <script src="script.js"> can't do? Why is type="module" so much more dangerous???
This is preventing me from just throwing together small prototype scripts with an interactive component, I don't wanna deal with web servers