Yes, that will still leak as the value of the variable will be substituted into the command line before it’s executed, so it’ll show up in the process table. Using the <(echo ...) redirection is replaced by a file descriptor that connects to an anonymous pipe.