Governments obtaining push notification metadata from Apple/Google

I think the best way to avoid this push notification theft is just by avoiding apps and services without GSF requirement in the first place.
Doesn't mean other 3rd parties can't steal. It's just a precaution against 1st party. Google can be avoided through de-googling. But for those who are on team apple, you're mostly out of luck.