It is behind a permission so it isn't that any website can just start sending you notifications.

(Although personally I'm not a fan of phone notifications either)