That's scary (the NotificationListenerService part). I had no idea security on Android was that bad. So any app can silently copy all notifications to a remote service? Mail subjects and body previews, facebook messages, etc etc etc?

Edit: Even though perhaps this hack isn't WhatsApp specific, the end result is the same - full compromise of WhatsApp privacy. Which is what matters to end users.