Ad services will love this (not).
43 karma · joined May 30, 2011
a) Resources using something other than GET are automatically not affected.
b) For GET resources, require that the body of the request contains a value, perhaps from a cookie but could be anything, ensuring that the request was made using xhr, which is domain restricted.
Sounds like the simplest way to me, curious why it wouldn't work.
And regardless of that, this is about having a single application platform for all the form factors. This video shows a tablet interface, I don't think they will force you to use it on the desktop, at least as shown here. I think the point was the same apps can run everywhere.