From support ticket SUPPORT-7738, should we consider adding this method also:

We use the REST interface from magnolia in multiple projects. Every time we setup a new magnolia environment we ask ourselves, why is OPTIONS not an allowed method in the default IP-Config configuration:
https://documentation.magnolia-cms.com/display/DOCS/IP+and+HTTP+permissions
There are some other exotic methods but OPTIONS is standard for CORS requests.