He did a responsible disclosure but looks like he decided it's a more pressing issue after I responded to him on SimpleX a few days ago.

It's about plausible not allowing us to disable location data and it's not a priority of theirs to implement (we requested that feature multiple times in the past). We've decided to self host plausible at some point where we would have more control.

We also believe the anonymized location data (extracted via IP most likely) aren't that serious to prioritize this and the heuristics @Michelson_Morley used to deanonymize user location - he can explain it better - aren't that great.

For example, he claimed he identified that two users are the same but we're pretty sure they aren't.