I was wondering this myself. Tiktok surely needs location data permitted to track, no? I'm sure there are some heuristics it can use, perhaps pinging servers or image matching pictures but surely this could all be solved by putting TikTok in a container with specifically limited permissions.