I think this pypush method uses Apple servers. I think the key aspect was the author figuring out how submit public keys and request public keys for other Apple users from Apple servers. From that point it seems to be as secure as public key cryptography.