The app decrypts the message and displays it via the system notification.

So in that case, the system has access to the plaintext, therefore the Alphabet boys have access to it as well. Unless, of course, you believe Apple isn't cooperating with them.

Am I missing something here? Maybe I'm missing a subtle detail.