4 ms·

At least on android, the payload can be encrypted - the notification that gets shown is built by the app.