This is actually somewhat old news. Snapchat pioneered this with the Snap Map, where essentially the whole purpose was to broadcast where you are to your friends.
That was so long ago now that even Snapchat is long last its peak relevance.
For example: are they married? Do they live alone? Who are some of their friends? Where do they work? What do they do at work? Have they recently lost/found/experienced something interesting? These are the kinds of details that can enable social engineering in digital and physical spaces. It's likely easier to lure a person into a dangerous situation if you reference minute details from their personal life.
Sometimes the threat model is "has $10k in a bank account" or "is young & attractive" or "practices a religion I don't like" or "it's Tuesday."
It's data entrusted to that specific person with the social contract to not share that data (assuming no permission for sharing was given). I would argue the same way if someone posted my full address online for example, you're breaking the social contract by sharing data I entrusted you with.
Perhaps they didn't tell their friend about that one abusive ex or an affair their having. Additionally in this case it is telling people that when this person is in a certain location they are having a bad day, possibly opening them up to harassment a scam or manipulation.
There are a lot of people that will use that information to their advantage, even if it is just for trolling.
For me, if I found out about a post like this I would stop any contact with the person effective immediately after informing them of not appreciating the post.
And it's NYC which has all sorts of people, many of which you may not want to be approached by.
If the juicebar gets tagged, then the people working there may start interacting with the friend in a way she may not appreciate.
Sending out life specifics, even if your not famous or have a stalker can be detrimental. And, it wasn't the friend's choice either. So, the original poster may loose a friend in exchange for likes on X.
But none of that registers as a risk: instead it’s a hypothetical X user who is so struck by a headshot on a map that they travel across the city on the off chance she’s still at the juice bar? That’s like worrying about being struck by a meteorite, but paying no attention to the risk of getting hit by a car.