You'll notice
PATH lookup for command completion now skips broken or unsafe symlinked executables.
When resolving command names against PATH directories for autocompletion and glob-style lookups, candidate paths are now checked with a new async guard that rejects empty paths, certain path shapes, and paths that resolve to symlinks pointing outside an allowed area, before treating them as candidate executables.