I do wonder if this would make for an excellent exfil implant since it doesn‘t register syscalls.

It would, hence why major cloud providers currently disable io_uring in many of their compute environments.