A normal iframe can't load documents not using COEP...
<iframe>
... but iframe credentialless can:
<iframe credentialless>