> It’s true that we can’t really know whether Google is exploiting these expanded permissions to collect more data unless we have some insider information.

You could track usage and see what pages on google.com are accessing these APIs.

I doubt that it's a lot. Google already has fairly good geo-localization based on IP, GPS-level accuracy isn't necessary for ads. They could've already connected your data from maps.google.com to www.google.com, because both are using consent.google.com and you're getting a .google.com unique cookie.

This is mostly just outrage because people don't understand how things work.