I think it might be because push notifications use long-lived connections that are already open when the VPN is turned on.