Yeah, I dislike the intrusive nature of the notification, but I can't really think of a better way off the top of my head. The notification API could work in theory, but if you don't already have that permission it would be odd to request it just for a one-time message like this.