I’d assume there’s multi-factor. Metadata can be fairly hard to spoof, and companies don’t necessarily have to comply with gov requests to let them pass the spoofing. I mean, you’ve got GPS data, IP and routing data (sure, IP might match your work computer, but the route it’s taking looks nothing like the normal route, so someone’s playing silly buggers with routing)
Could also have other people verify that the person is back home. You have to call your mom and tell them you’re home and she can click something saying that you’re not traveling (or similar). There are good reasons to believe that this is resistant to customs officers (at least in the US), as it’d be compelled speech for them to have someone say you’re done traveling, and generally the government can compel silence, but not someone to say something.
