I wouldn't be real worried about it. If an attacker can set envvars we've lost the game for that computer already.