If I own a plane and you track that plane, there's nothing I can do, since that information is public. Websites that publish that data through an API are publishing data they got from the aircraft itself.

There's a number of ways one can avoid being tracked and Elon saying there aren't is a blatant lie.