BinderProxy native destruction resilience

* Don't race with construct/init; we can't abide partial state here
* Defense in depth: null check the contained native state to catch
  double invocations.

Bug 27377823

Change-Id: I38f91668d36404c2a7b93d5f7c6616d9eb3f0a30