Shifting from ad-tech telemetry to explicit location tracking fundamentally alters the threat model from behavioral profiling to direct geospatial surveillance. It raises a critical question: how will the agency mitigate the risk of similar overreach if they pivot to using alternative data brokers or developing their own tracking infrastructure?