Push wake-ups run the bundled app, never the live site; files the APK doesn't carry are no longer fetched from the network. No stray launcher icon. Notification permission is asked only when a UnifiedPush distributor is installed.