He didn’t say limited, he said nonexistent.

More specifically, if you can inject scripts I don’t see why you couldn’t call window.close()