echo (echo (echo fil<tab>

This doesn't work properly. The issue is that parse_util_locate_cmdsubst returns the outermost command substitution containing the cursor, not the innermost one.