You're correct.  chrooting to the supervisor directory isn't great, though -- it means that, if you compromise the supervisor once, then you can compromise it persistently.  Perhaps it should chroot somewhere empty.