This exploit doesn’t rely on knowing the contents of the notifications necessarily. Some notifications aren’t encrypted and they’re obviously more exploitable.

This exploit doesn’t rely on knowing the contents of the notifications necessarily. Some notifications aren’t encrypted and they’re obviously more exploitable. But in this case, just the use of the unencrypted metadata is enough to narrow down people of interest. So even if you don’t know what it contains, you can still get valuable information like general location and usage patterns by effectively just observing that the notification happened and how it was handled.