Prompt injection works on Android notifications, as well, and could have been used for a myriad of things.