It can quite obviously never be "secure" if the basic premise of the system is that entities self-report their location. You can only hope to make it harder to submit wrong data.