It seems that ash does not correctly block lock screen windows (behind lock system modal dialog) from being activated:
https://cs.chromium.org/chromium/src/ash/wm/ash_focus_rules.cc?rcl=1fa1eff47a519f8637f10ad65c0d81eef01597c0&l=65
One manifestation:
1. On login screen, launch network config system modal dialog.
(the dialog is expected to have focus upon showing)
2. Click on status tray - a tray bubble should be shown
3. Press Tab, to tab into the bubble
4. Press Esc, to close the tray bubble
5. System modal dialog is expected to get focus back - it doesn't
Comment 1 by bugdroid1@chromium.org
, Oct 16 2017