For most users I suspect that it's probably better to disable the notifications so that they only see them when they actualy open the authenticator app. It mea

For most users I suspect that it's probably better to disable the notifications so that they only see them when they actualy open the authenticator app. It means that they lose some visibility into whether their password has been compromised - but as the article says, a lot of users aren't going to understand or react sensibly to that anyway. And it largely solves the issue of they accepting a notification to stop them being spammed, or just accepting one they receive our of the blue.