Eh, it's less easy than it used to be if the application developer really doesn't want you to use a spoofed location. Pokemon GO and SafetyNet have been doing next-level in their ability to detect root.

And GPS spoofing as a debug feature is built into Android now, so there's less legitimate reason to need root to do GPS spoofing