I find it interesting that iPhone doesn't do a sanity check of these WiFi/cell fingerprinting based results against the GPS receiver it actually has. I can understand how WiFi only device would not have such an option, but why not do it on iPhones if Apple is known to be against location spoofing?

It does fall back to the GPS receiver if no internet and no cache but I suppose it's just more power efficient and not on anyone's minds that people would MITM for this purpose.

I still can't believe that certain IOS APIs are locked to paid developer accounts only (PacketTunnel, Shortcuts, etc.) such that you can't even sideload your own app onto your own phone with these features. It's not very well documented that it's paid either. Spent forever a couple months ago figuring out why my code wasn't working before giving up and opening my wallet.

You also have to request and be granted permissions for various features like local network access

It’s quite an authoritarian wake up experience to go thru the whole process. It’s very clear their hooks are deep.

But then on the flip side so are the threats. Shitty world.