These work differently from other privacy controls, and are required for Find My… and Activation Lock. There are some catches too, and no command tool to help.
locationd
Untangling what in Privacy & Security is controlled by TCC, what resetting it really does, why you should do that before selecting it database, and what TCC does for iCloud.
Unique because Location Services isn’t managed by TCC, but by its own locationd service, and is invariably shared in iCloud.
The Eclectic Light Company 