Previously it used to treat /sdcard as the home directory, which was extremely dangerous since that location is writable by most processes. Any intentional or unintentional changes to /sdcard/.zshrc could have a significant impact.
Now, it treats /data/local as $HOME.