How certain are you of that?

That appears to be about providing a message to the user before requesting permissions.

However, it appears even permissions you allow your app to request still need to be declared beforehand? https://developer.android.com/training/permissions/requestin...

Regardless, people are reporting mixed info on whether the app declares location access: https://news.ycombinator.com/item?id=47557010