These days it defaults to zsh instead of bash. The shipped bash is ancient due to (I believe) being last version released as GPL-2.0.

I'm not speaking about the default login shell, which is indeed zsh, but what /bin/sh points to.