I don’t get how posting their location in this instance matters. Unless the friend has a stalker, is a famous celebrity, or is operating under some really unusual threat model, what risk is there in the whole world knowing some random 20-something is at a random juice bar in NYC? They aren’t being targeted, this isn’t a controversial location, etc.
well in my particular example it's a juicebar she frequents when she's had a bad day. So, she probably lives or works in the neighborhood. And a detail I didn't share was that she was attractive (her icon on the map was her headshot). So someone could get it in their head to approach the person and know what she looks like, where she might be, and believe she needs cheering up
And it's NYC which has all sorts of people, many of which you may not want to be approached by.
If the juicebar gets tagged, then the people working there may start interacting with the friend in a way she may not appreciate.
Sending out life specifics, even if your not famous or have a stalker can be detrimental. And, it wasn't the friend's choice either. So, the original poster may loose a friend in exchange for likes on X.
If a friend is posting a person's location, they likely post other information about that person. The aggregate information could allow the assembly of a much more complete picture of a person than is possible by observing a person at a random juice bar.
For example: are they married? Do they live alone? Who are some of their friends? Where do they work? What do they do at work? Have they recently lost/found/experienced something interesting? These are the kinds of details that can enable social engineering in digital and physical spaces. It's likely easier to lure a person into a dangerous situation if you reference minute details from their personal life.
Sometimes the threat model is "has $10k in a bank account" or "is young & attractive" or "practices a religion I don't like" or "it's Tuesday."
It's not their data to share.
It's data entrusted to that specific person with the social contract to not share that data (assuming no permission for sharing was given). I would argue the same way if someone posted my full address online for example, you're breaking the social contract by sharing data I entrusted you with.
Perhaps they didn't tell their friend about that one abusive ex or an affair their having. Additionally in this case it is telling people that when this person is in a certain location they are having a bad day, possibly opening them up to harassment a scam or manipulation.
There are a lot of people that will use that information to their advantage, even if it is just for trolling.
For me, if I found out about a post like this I would stop any contact with the person effective immediately after informing them of not appreciating the post.