They could realistically prevent calls to open popups in response to a mouseover event too. It really ought to only be allowed on “affirmative” interactions like a click. Of course, they can just make the close icon do something else.