Then this attack wouldn't work, but it would still be possible to pwn them if an attacker with enough skills wanted to try. It would probably require a lot of resources though. Maybe exploit a browser zero day vulnerability and then geoposition with WPS, if you can control the police you could try and have them get to the target before their session ends. Not saying that it would be easy at all, but it would be firmly in the realm of possibility.