I don’t quite track this. They seem to move from talking about GNSS receivers (consumer and contoller receivers combined) to talking about instances.

So does a Strava account count as an Internet connected GNSS instance? A Garmin device that’s publishing location data to a feed? A GNSS control satellite that can upload adjustment data and for some reason is Internet-connected?

I can’t tell anything meaningful from their report; Kaspersky is usually better than this.