When sending data from a content script to a page script, both the Chrome docs and the MDN docs provide examples with window.postMessage(). However, window.dispatchEvent() seems to work just fine too, and allows customizing the event name with a CustomEvent. Are there any security or capability downsides to using dispatchEvent instead of postMessage?