that notification provider breach is wild since getting a fake alert right through the official app makes falling for it so much easier