I found that the check looked only at token zero, blocking sudo, su, or doas there, while wrappers that take a command as an argument could sail through. The check was four lines, and wrappers passed because the check examined only the first token.
This enforcement gap is related to the unused command-safety regex described in unused command safety regex.