history.replaceState still adds entries to the "Browsing History"
I can't find any W3C spec on the global history, but even the session history is left unspecified to what the expected behavior is.
In practice, this has been an open bug for over 8 years with most of the browsers choosing to implement global history this way. In short, there probably isn't a workaround other than not calling pushState/replaceState.