Cash.app just sent me a promotional push notification contrary to my opt out.

Deliberate, boundary-pushing violation of consent in an app that requires absolute trust?

Or vibecoded bug, which means that there’s already a pudding-fingered security breach in there somewhere?