Strava tracks can also be spoofed and you have no
guarantee for them to appear on a schedule either.
I just find this to be on the sensationalist side of "data" journalism lacking any sort of contextualization or threat level assessment.
Unless there was evidence of some more sensitive locations that have not been published along this story, it looks like some serious unserious case of journalism to me.
Heh, establishing an "opsec failure guy" on the boat with software on his Garmin that can be activated on days with special secrecy demands to translate his runs to a plausible fake location? I like that idea. It would actually fit a one-off like the Charles de Gaulle quite nicely!