If that's the case, then a bad actor could spam someone's phone with notifications. All they'd need is a username.

Or, like my mum, you don't read what the notification says and just hit 'OK'. Now you've let someone into your account without realising

I have Hide NSFW Posts set to on. It hides the images, but the post titles are still showing up.

I have also experienced this issue. I want to see my subscribed content, so click on subscribe and it switches to All. Have to click subscribe a second time for it to do what I want