Is the geolocating stuff actually a security hole? I just assumed these exploits were possible because people click right on through the "This App wants access to your children's intestinal tract and your cars tire pressure monitoring system." I guess I'll RTFA.