Yeah, I thought about that, but this would kill even directly invoked executables, right?
And I also could imagine that tools that allow setting arbitrary env vars might filter common troublemakers like PATH, but almost certainly not niche env vars that change the bahviour of ld-linux.