the GPS location is reported by the tower, so nothing is stopping a mitm device from spoofing that too
I'm pretty sure gps location is derived from signals from GPS satellites and ground stations. You can see this if you're somewhere with no cell signal but have gps, or visa versa.