There’s a big difference. Facebook likely tracks exact geolocation through a phone’s or computer’s location services, whereas an IP address only provides a general area - sometimes as accurate as the city or region, but other times not even the correct state. It’s precise enough to offer basic security information, but it definitely cannot reveal a home address.

Blazot doesn’t request specific geolocation data because it currently has no features that require it. If, in the future, users want to find “Sites” near their current location (such as a nearby pizza place), that feature could be added as an optional, user‑enabled setting. For now, there’s simply no need for it.

The risk‑level system is necessary because so many bot and scam accounts are signing up, and users need some form of warning. It’s at least a step toward preventing people from falling for scams. As the system improves, it may eventually be able to factor in additional signals so that some VPN users fall below the threshold where a low‑level risk warning appears, but this is just the starting point.

People are free to use VPNs, but doing so will trigger at least a low‑level warning, for now. Heavily abused VPNs - typically cheap services with poor security practices that are frequently used by bots and scammers - will trigger higher‑level warnings.