I think they mean the advent of sending that GPS data over a cellular modem back to some home server. Due to the advent of GDPR+CLOUD Act[0], no US company can legally own a subsidiary in the EU and collect any PII-linked data from EU citizens; in other words, the GDPR's goal is to localize all citizen data within the country's borders. With this, it'll be super easy for a country to obtain that locally-stored information for the purpose of police 'investigations' (possibly via europol/similar for cross-country intel).

This should apply to GM, Ford, Stellantis, Tesla, Rivian, and Lucid, as all of them offer some sort of app functionality for seeing the location of your car.

0: https://news.ycombinator.com/item?id=31853276