If I'm on a VPN and accessing sites like Youtube or other's using Google services, am I still at risk for being located geographically via scripts in content I am viewing? Like I think some scripts can read what wifi networks my computer is seeing (other networks) and those networks are not using any security so they can be geographically located and show that my VPN IP is phony and I'm really close to "Billy's Bakery Wifi" and "TMobile Starbucks Springfield,NJ" or somewhere. I assume something like noscript can block some of this but can some of these scripts embed within other scripts that may seem less harmful? I guess VPN can only encrypt your traffic, not truly block a dedicated attack from knowing where you are roughly.
There is though another problem you should consider: DNS leak.
Explained here: http://www.dnsleaktest.com/what-is-a-dns-leak.html
Also discussed here: What is a DNS leak?