If it becomes more common for a service to reveal the geography of a user, wouldn't these cyberwarfare farms stand up VPN servers?
This is certainly useful as a one-time reveal since the attackers didn't think this data would leak, but now can't they prepare better?