One of the listed binaries is `cat` and that `sudo cat file` is problematic because "it may be used to do privileged reads or disclose files outside a restricted file system."

Like, duh, that is what `cat` does. It's not the problem, it's the `sudo` is the problem. WAI?