Adding vrchat.com or api.vrchat.cloud to the whitelist would allows world creators to access vrchats api. People could access things like the online user count, or total occupancy of the current world.
we can already access assets.vrchat.com for loading images so why not string.