Try not to spoof system-ui in contexts exempt from RFP

As requested upstream.

Also fix Android (#42017 (closed)) while we're at it.