False. There is client-side protection in some browsers now, but this attack exploits native apps that submit precise geolocation when requesting location-targeted ads. It demonstrates how to essentially reverse engineer that precise location with a matrix of ads crafted for this purpose.
But I care some about it being tracked even when I'm not doing anything bad.
Reverse engineering will get you a PoC, but you can buy the cleansed data fairly easily (apparently..)
It's great that some OSes are trying to solve it system-wide but host blocking isn't viable as ubiquitous protection against this attack. It would just break all ads all the time, which ultimately would make the platform untenable for ad-based apps. What you want is something like the machine-learning Intelligent Tracking Prevention that Safari just rolled out, but applied to native apps. That is non-trivial.
Sounds like a feature not a bug.
Anyways I'm sure tech savvy folks who care about privacy and hate ads already have all the basic angles covered. I know I do!