Interesting point. I have also been thinking about how LPWANs could, in theory, be used to exfiltrate data from consumer devices without anyone noticing.
I mean, it would be trivial to hide a tiny Sigfox / LoRa transmitter in kitchen appliances, washing machines, televisions, cars or whatever and claim that you need information like location and how the devices are used for "market research".
It feels like it should be illegal, but I'm not sure if it is or if there are loopholes. Do you, by chance, know of any actual consumer products with covert Sigfox / LoRa transmitters?