Don’t know if it’s by design, but I can access notifications of other people by changing the URL.
It’s not by design, but it’s low priority because all the information in the notifications is accessible via the profile anyways, so there’s no privacy concern.