@sneak yeah, Androids location permisson system is kinda shit.
The issue is less the fact that it asks for permission when gps is turned off, but that you have to give an app location permissions that it can scan your wifi (i.e. nmap) / read your ssid.
I get why the did it, with the rise of databases with wifi macs and their repective locations but it feels hacked onto the existing permissions system.