Top-level event.user attributes added by an external IdP or custom database script are still not supported in Actions per this documentation:
I unfortunately do not have any further update currently - Stay tuned though, I’m sure if things changed it will be announced here in the community and/or in the changelog.