Keep location options off unless a compelling reason justifies otherwise, take only the granularity needed, alert children at sign-up and each use and show an obvious sign when location is tracked so it cannot be left on by mistake, and make any option that shows a child's location to others revert to off at the end of each session; core-service location use needs no setting, and PECR location data rules also apply where relevant.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.