Can't you use internet geolocation from a distributed botnet, and triangulation based on timing?

Maybe. I used to use this about 20 years ago, trying to track down where the UK root servers were so I could increase my drop-catching. Get test accounts on as many hosting providers as possible, check hops and ping times, move on to the next one. It's not as accurate as you'd hope, though.

Yes, and this could perhaps determine location within a few miles.