This is how it used to work; notifications can be encrypted now and Signal uses an extension to decrypt them.