[JCharante]

But this doesn’t require the attacker to have access to a cell network

[c0balt]

And more importantly is also a lot more likely to not be detected by an ISP or similar actor.

[wkat4242]

It's pretty undetectable even by Apple due to the way Find My works.

The receiving of the data, not the sending is the most detectable part. Because you need to modify a Mac app to get the raw data.