if geolocation data can be captured in the same signature, that would be a good enough approximation for most relevant cases I think.

GNSS signals can be relatively easily faked because the original signals are very weak so overpowering them doesn't require much broadcast power.

ah, damn.