I solve that in a hilarious way: by uninstalling the app when I’m not using it. Works perfectly, other than some slight sign-in friction, for e.g. airlines, Uber/Etsy, and so on. But I’d rather suffer through logging in with a saved password than receive notification spam — I can respect that others prefer the opposite way.