I used the Xposed Module "XPrivacyLua". On Android 10 it only runs in EdXposed which itself is a Magisk Module; Magisk Root is needed. I should mention though,

I used the Xposed Module "XPrivacyLua". On Android 10 it only runs in EdXposed which itself is a Magisk Module; Magisk Root is needed. I should mention though, AFAIK only the pro version of XPrivacyLua can spoof these values and log when they are requested. I have it configured so that they randomise at boot. Also keep in mind that this is pretty useless if your IP is exposed. One would just use your IP to gather the location, regardless of spoofed location permissions. So you'd have to either have a firewall as well or use something like Tor.