Does CORS need to be opened up for specific browsers?

No never! I have a friend who ran into a situation in which she could POST to a REST endpoint in C# from an Angular 5 app only in Edge, but in her case she just needed to add application/x-www-form-urlencoded as a header to support other browsers.