Are function environments now secure?

[Dirk Laurie <dirk.laurie@...>]

Now that getfenv is finally dead and buried, is the function
environment tamper-proof against anything short of
debug.getupvalue?