Presumably it's being alleged that the app store operator could switch binaries, not sure.
Bigger issue is privacy with notifications going through Google, right?
Bigger issue is privacy with notifications going through Google, right?
It does receive some Firebase messages from Google, but not the type that automatically pops up a notification. Instead these are silent ones that trigger the app to perform a particular action, such as fetching any new Signal messages from Signal's servers.
That has never crossed my mind. Do notifications on Android normally go through Google servers? As in could be spied or data mined on?
I don't think all notifications are push notifications, and those that are would be https encrypted between the host and client, so any e2ee message would have to be decrypted on device before showing a notification, google should not have access to this, but of course it comes back to whether you should trust anything software tells you.