The nearby phone is the one encrypting its own location with the public key broadcasted, so in theory fake location is possible if you had control over the protocol in all nearby devices.