Nearly – Family Location Sharing Without the Data Harvesting

Is that still the case? I thought there is a permission for this these days. I mean assuming you don’t use that might be a mitigation but people could disable the notification permissions right?