It's more likely that the flight in question was using the three letter ICAO code in its passenger facing flight number. I have never known a three character IATA code to be used despite it technically being within the specification.
If you mean the Find My Device app it only asks for foreground location permission so I would assume the actual device "beacon" is part of the system not that app.
I would find it hard to take a CTO seriously who can't differentiate between beta and "generally available", or consumer product and enterprise cloud product.
It's a bit like saying you wouldn't use AWS because of Fire Phone.
1 guinea = 1.05 pounds
You purchase the horse in guineas, seller gets paid in pounds, auctioneer keeps the missing 5% as commission.