Thanks! The map will actually not display all drops, they are limited to ~50 or so and are meant to just indicate that there is _something_ around.
Nothing in place to actively mitigate location spoofing though you do need to be using the iOS client in order to get something pushed to the Firebase store (you could run it in a simulator I guess and fake locations). You can actually see some test drops I made in the middle of the atlantic here: https://dropanon.com/map