The people who are most likely to be snooped on are also more likely to have the notifications turned on, so I don't think it's such an easy choice for an attac

The people who are most likely to be snooped on are also more likely to have the notifications turned on, so I don't think it's such an easy choice for an attacker. The entities this is designed to thwart are not going to want to risk leaving behind a trail of evidence, even if the risk is small. It also prevents fishing expeditions, since the risk would quickly add up as more targets were added. All that said, a one-time prompt to turn on the notifications for users that care about extra-strong security seems like a good idea to me.