That still exposes some metadata. Depending on your threat model, leaking the timing may or may not be a problem.

Also, how do you avoid leaking the sender? You can avoid giving Apple that information by routing the notification through a server, but then that server would know the sender and recipient.