Security: gpsd should use Unix socket by default only, not a tcp/ip socket on localhost
gpsd should be configured to use Unix socket by default only, not tcp/ip socket on localhost as it evidently does now on port 2947. The reason is simply that Unix sockets allow file system permissions and TCP is wide open to any process on the entire phone to access (outside of containers), and that just seems like unnecessarily difficult to lock down.