It’s actually kinda obvious if you know the first thing about how push notifications work that they could easily be compromised. I keep them off if using secure messengers.
What is most egregious is that Apple knew this was happening and still forced people to use their centralized fake & gay APNS server thereby making it easy on the feds.
Kill your heroes.
Don’t trust. Verify.