The list returned may contain windows that are being destroyed. The ShellGlobal method filters those out, so use that instead; we should eventually stop looking at window actors when we want windows, but for now this is the easy and safe thing to do.