3C task manager is using native code to invoke su, and is out of reach from Xposed and therefore XPrivacyLua.
True, but you can use custom hooks to prevent apps from successfully invoking su in the first place, effectively hiding the su shell command from apps and that's what @Moon_stay was...