Re: @Pompous Git - Maybe I'm thick too, but ...
The "convergence" (whatever you mean by that in this context) has nothing to do with it.
But if you read the article more closely, you'll see they use postscript (a Turing-complete programming language) to write a dummy web server that defeats the browser's built in CORS protection. The question is does the subset of postscript commands available in PDF also allow that?
I think PDF lacks the showpage
operator. And its restricted nature means it's probably a challenge. But I'm not a PDF expert.