Why disabling CORS on a map tiles service

I would like to know what security issues or security risk would prevent disabling Cross-Origin Sharing Ressouce (CORS) on map tiles service.

Most of public tiles services, such OSM, Google, Bing or ESRI, have CORS enabled.

What would motivate an organization serving tiles publicly to disable CORS?