We have found a fix In our Config.xml we added these preferences in the platform android tag:
<preference name="hostname" value="localhost" />
<preference name="AndroidInsecureFileModeEnabled" value="true" />
It appears that the CORS issue was related to a local development problem and the issue that our users face was related to an Error Connection problem with the app itself