It does apply here. A domain does not need to be expired, a delete can be sent any time it’s active. The only prohibition is if the domain has “clientDeleteProhibited” status which the registrar can remove.
That's possible, but I'm _pretty_ sure that's not how it works, there are restrictions on what circumstances registrars are allowed to do various actions too.