Comment by edunteman

Correct, your PATH resolves to your local tools as if it was unprotected bash, but syscalls are filtered/virtualized