Their explanation for why it can't be on Android is that the nature of Android push notifications is such that they (the developers) would need to maintain a database of device IDs that could be tied back to physical devices and potentially be used to deanonymize which users received which alerts.

To me, this sounds lazy and like something that could be mitigated with End-To-End encryption.