Brian Krebs is great. Back in 2018, I discovered a flaw in a website enabling anyone to track any US cellphone’s location without consent, and I contacted US-CERT and Krebs to break the news (https://krebsonsecurity.com/2018/05/tracking-firm-locationsm...). After checking the locations of several numbers he provided, I remember discussing his need for location privacy - and his shock when he found it was so easy to break. His opsec might be very strict, but when every cellular carrier is eager to sell off your location data, that level of security is absolutely justified.