So why are preflight requests necessary? Well, they help prevent cross-site scripting (XSS) attacks, which are a type of security vulnerability that allows an attacker to inject malicious scripts into a web page.