Push message is an SMS message and from SMS Center to the terminal it is as safe/unsafe as a normal SMS message. Those are not encrypted in any specific way, other than that push messages are encoded into binary format similarly as wml is encoded to wmlc. The link between PPG (Push Proxy Gateway) and SMS Center is typically inside operator firewalls or VPN (Virtual Private Network). TLS or SSL could be used between the application and PPG, in case it is supported by the PPG.