Under the hoodTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
SandboxArea: what it touches
In DevelopmentKind: in v2.1.248,
In DevelopmentSection of the release
The denylist exists; whether Bash handling filters them is not visible.
What
A standalone list of shell-sensitive environment variables now exists, covering ENV, BASH_ENV, SHELLOPTS, PS4, GLOBIGNORE, LOCPATH, IFS, TMPDIR, BASH_LOADABLES_PATH and others, the kind that can hijack a shell at startup. Whether Bash command handling filters them is not visible from the constant alone.
Evidence
BASH_LOADABLES_PATH
Strings lifted out of the shipped bundle, so the claim above can be checked against them.