Wouldn't the simplest way to satisfty the paranoid be to have a hardware switch for gsm modem (and maybe gps chip/antenna also)? The appeal of such a unique feature might result in extra sales also..
... make sure the modem is OFF when we expect it to be (trivial), make sure the modem cannot get a GPS fix when we don't want it to do (also trivial, cut/short GPS antenna) ...