There's an unspecified short/random delay between the user taking the screenshot and the notification firing. The trick used by Bluesky, Telegram etc is using a different technique. They (mis)use secure input fields to show an overlay when the user takes a screenshot.