If you just want to spoof location, you only need to use the setting in developer options, but this is detectable by apps. For example, Ingress or Pokemon GO will refuse to work when it is enabled, so to actually spoof location on some apps, root is needed.