> how much does the situation improve if you unset the Env vars after reading them?

How would you do that? They still are in /proc/, aren’t they?