Ask HN: How does Apple's 2FA location service work?

Does it try to geolocate based on the IP or is there something more advanced going on?

Sometimes when logging into appleid.apple.com my iPhone responds with the 2FA prompt, but the location is reporting Washington D.C. as opposed to CA (where I am). A bit worrisome.