Notify Switchboard routes messages to notification services you already trust; it makes no outbound network calls of its own.
If you find a vulnerability (for example a way to acknowledge an alert you should not be able to, or to make the router call an unintended service), please open a private security advisory on GitHub (Security → Report a vulnerability) rather than a public issue. You will get an answer within 14 days.
Supported versions: the latest minor release only.