Encrypted, but that's on transit. Does Google read everything, or the only thing transfered is the alert and NOT the Signal/text/WhatsApp message itself?
Signal is e2ee so Google Cloud Messaging should only get the alert itself, then the encrypted message is downloaded from the server and decoded on device.
End to end encrypted to device, standard pub/private key crypto.