Status line commands now check workspace trust before executing. If trust hasn't been accepted, a notification is shown: "statusline skipped · restart to fix".
Evidence
Statusline workspace trust validation (search for "Status line command skipped: workspace trust not accepted")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.