As they note, the pop-ups are "app-modal" and cause the browser's JavaScript engine to pause until a user response is obtained. Hence, they can be abused by ransomware and scareware scammers.