iOS background-location threat model: the surface nobody documents

Background location is treated as a UX concern. It's also an attack surface; the threat model for Always authorization is more elaborate than most ship.