Hacker News Reader

If the notifications aren't encrypted, then that means it gets decrypted on some server somewhere too :(

That's not necessarily correct, it would depend of the implementation. See my reply.