Why not make a user who wants notifications click a special button taking them to a special page where you show the notifications popup?

I'm sure if you asked, everyone who does this is going to tell you that "MY use of it is not nefarious. It's everyone else's fault that technique is abused."

Stop breaking the users browser. If you are, regardless of your intent; you are making a shitty experience for somebody, somewhere.