Url launcher on android has receivers that should be either marked as exported or marked not exported.
See:
RECEIVER_NOT_EXPORTED

Public documentation:
https://developer.android.com/about/versions/14/behavior-changes-14

(internal googler links only):
https://critique.corp.google.com/cl/530531312
https://docs.google.com/document/d/16rHrghFfAD6P75RE237OwmsSwqcrmt2mDJlUMPsuxjU/edit?resourcekey=0-dEDIKmfyVVX1DCsKd0Nebg#heading=h.xgjl2srtytjt

Android implementation code:
https://github.com/flutter/packages/blob/main/packages/url_launcher/url_launcher_android/android/src/main/java/io/flutter/plugins/urllauncher/WebViewActivity.java#L146

example code

ContextCompat.registerReceiver(
        application,
        broadcastReceiver,
        new IntentFilter(SOME_ACTION),
        ContextCompat.RECEIVER_EXPORTED);

Chalk bug b/294558650