E.g. the actual used values of allow-suspicious-udfs and skip-grant-tables can't be seen in SHOW GLOBAL VARIABLES output, and are not listed in INFORMATION_SCHEMA.SYSTEM_VARIABLES either.

As both of these settings have security implications it should be possible to see their current value from the SQL level though, for audit / secure configuration check purposes.

Especially with the now added GLOBAL_VALUE_ORIGIN and GLOBAL_VALUE_PATH information in I_S SYSTEM_VARIABLES, every setting that can be done via command line or my.cnf should actually be visible in SYSTEM_VARIABLES ...?