### Preflight Checklist

- [x] I have read the [Contributing Guidelines](https://github.com/electron/electron/blob/master/CONTRIBUTING.md) for this project.
- [X] I agree to follow the [Code of Conduct](https://github.com/electron/electron/blob/master/CODE_OF_CONDUCT.md) that this project adheres to.
- [X] I have searched the [issue tracker](https://www.github.com/electron/electron/issues) for a feature request that matches the one I want to file, without success.

### Electron Version

15.0.0-alpha.10

### What operating system are you using?

macOS

### Operating System Version

macOS Big Sur 11.5.2

### What arch are you using?

x64

### Last Known Working Electron version

This feature never worked before

### Expected Behavior

`navigator.fonts.query()` should return a promise which in turn should resolve with a list of fonts provided by the operating system.

### Actual Behavior

`navigator.fonts.query()` causes the renderer process to crash (the window becomes gray and the dev tools are disconnected).

### Testcase Gist URL

_No response_

### Additional Information

`navigator.fonts.query()` is part of the experimental [Local Font Access API](https://www.chromestatus.com/feature/6234451761692672) and it must be first enabled by adding `FontAccess` to `webPreferences.enableBlinkFeatures`.

I was also able to reproduce this bug with Electron 13.2.3. I was unable to reproduce it with Chrome 92.
shell/browser/electron_browser_client.h
bool ShouldTreatURLSchemeAsFirstPartyWhenTopLevel(
      base::StringPiece scheme,
      bool is_embedded_origin_secure) override;
  void OverrideURLLoaderFactoryParams(
      content::BrowserContext* browser_context,
      const url::Origin& origin,
      bool is_for_isolated_world,
      network::mojom::URLLoaderFactoryParams* factory_params) override;
#if defined(OS_WIN)
  bool PreSpawnChild(sandbox::TargetPolicy* policy,
                     sandbox::policy::SandboxType sandbox_type,
                     ChildSpawnFlags flags) override;
#endif
  bool BindAssociatedReceiverFromFrame(
      content::RenderFrameHost* render_frame_host,
      const std::string& interface_name,
      mojo::ScopedInterfaceEndpointHandle* handle) override;
  bool HandleExternalProtocol(
      const GURL& url,
      content::WebContents::Getter web_contents_getter,
      int child_id,
      int frame_tree_node_id,
      content::NavigationUIData* navigation_data,
      bool is_main_frame,
      ui::PageTransition page_transition,
      bool has_user_gesture,
      const absl::optional<url::Origin>& initiating_origin,
      mojo::PendingRemote<network::mojom::URLLoaderFactory>* out_factory)
      override;
  std::unique_ptr<content::LoginDelegate> CreateLoginDelegate(