[amadeuspagel]

If it's centralized at that level anyway, why can't Mozilla's push service also do some kind of spam filtering?

[warp]

The payload of a web push message is always encrypted, iirc the API doesn't have any mechanism to send an unencrypted message.