According to the command monitoring spec:

All legacy operations MUST be converted to their equivalent commands in the 3.2 server in the event's command and reply fields. This includes OP_INSERT, OP_DELETE, OP_UPDATE, OP_QUERY, OP_GET_MORE and OP_KILL_CURSORS.

https://github.com/mongodb/specifications/blob/master/source/command-monitoring/command-monitoring.rst#upconversion

However, pymongo.helpers._first_batch publishes a command event in the internal format returned from pymongo.helpers._unpack_response:

{
        'cursor_id': <long>,
        'starting_from': <int>,
        'number_returned': <int>,
        'data': [OP_QUERY documents...] ,
}

This affects pymongo's helpers for listIndexes, listCollections, currentOp, and fsyncUnlock.