There could be a standard protocol describing how to authenticate and talk to a server, and get notified. It's not that different from chat protocols.

And operating systems could allow user to select their preferred server, although I wouldn't expect Apple to allow something advanced and anti-vendor-locking like that.

Wouldn't a non-Apple controlled authentication system suffice? Taking a punt here, but maybe Matrix could work?

So what? So does email.