Heh, my mother was recently alarmed by the following iOS notification:

(password-at-risk-blah-blah)... 'iPad can help you re-secure your account.'

She associates poor grammar with phishing attempts, so assumed this could not have been a genuine notification from Apple. When I checked my own devices, it seems clear that their approach is at least consistent.