Tripwire security researchers found the Google Home and Google Chromecast could leak location data through unauthorised network connections. The IoT's security issues run much deeper ...

With all of that put together, and some configuration of IFTTT he can ask his Google assistant (or Google Home) for location data, all without sharing that data with Google.