Unless the shared object file also includes an override for the function that expands environment variables to lie about the true value of LD_PRELOAD.
the twist: echo is also hijacked...
Okay... just type "Export" then.
okay, so now the getenv call is hijacked too.
You can play this game all day, as long as the environment is stored in user space, you can get it and fake the output.