@gerowen It’s inherent in how notifications work on iOS. There’s no pull at all. The application which wants to show a notification makes a call to the OS with the contents of the notification it wants to show. So yeah, if Signal is set to share the cleartext of messages with the OS (which it is by default), then the OS sees the cleartext of those messages.

It’s a bit like the “revelation” a while ago that a third-party keyboard could exfiltrate what you type into Signal before it’s encrypted.