Asymmetric Encryption vs Shared secret via ECDH
Your alternate method has an expensive public key operation for each push message.
While the first protocol does a key exchange just once per subscription and then continues with a symmetric key.
If in the key exchange both sides authenticated themselves (Or at least the Application) the user can rely on this, if authenticated encryption is used it still a fast symmetric key operation to decrypt and authenticate the message.