VLMs as GeoGuessr Masters: Exceptional Performance, Hidden Biases, and Privacy Risks