Indeed and while encrypting push traffic helps and should be the baseline expectation, providers should ideally also be sending decoy traffic.