When you have no influence on the service and the service doesn't enable CORS, this is indeed a case that needs to be delegated to the backend.
Thanks for the offer Ken.
BTW, where are you based?
I live in Valencia, Spain (meant to be semi-retired) but the company is UK based
Very nice indeed.