Comment by kro

Apps can bypass websecurity (CORS fetch), that allows for third party clients for example on video platforms using their internal APIs.

I don't think the reddit clients work this way though.