The Web Push Standard supports e2e encryption for messages sent from your app to the device:

https://web.dev/push-notifications-web-push-protocol/#the-pa...