Isn't that true of any notification system? You're the one setting the payload, you can encrypt it before it gets to Google or Apple.