bypass rssh restrictions?

Hi /r/linuxadmins,

I recently am trying to setup a transfer shell that can utilize (rsync,scp and sftp), and rssh seemed to be a good option.

I currently have sftp within ssh setup but as you can see only sftp is allowed this way.

My other thought is to utilize a chroot jail and provide only those 3 commands inside but rssh seems like an easier and better solution for this.

My question is more curiosity rather than anything else, I am aware of security bugs with earlier versions of rssh, but is it rather easy to bypass this shell currently?

Thanks!