This question applies today regardless of default path statements.
Absolutely nothing on a default Fedora system prevents me as a non-root
user from calling any setuid binary from (/usr)/sbin. Nothing. If
we're concerned about the security of these things, we would have to
audit them regardless of any path changes. Period.