OTP is such an obvious choice that they must feel it necessary to query the mobile network. Might they have access to real-time location with this stupid protocol?