You are absolutely right about that. Passively detecting your location? Fuck that. We are getting into an era where bots are overwhelming and user verification is a valid topic to discuss. I think additional device permissions can be one element in that discussion. But this idea he popped off the dome is a miserable example of such.