I found a solution for this!
If anyone bumps with this problem with CORS permissions, some cloud storage services have a specific URL to allow public permissions.
In the case of Dropbox you can use this: https://dl.dropboxusercontent.com/{your-file}
And then call the url with magic text to the plyr comp.
Maybe not the best option but works for now.
Hope this helps someone!