Anything that can be modified by an attacker can not be used to secure the sudo command. This is a recursive requirementor hierarchy for secure systems.
Like, sure you could, but you end up with a very useless system.
Easier to just use VMs for each security context.