> Perhaps they’re passing this command to a secured container? That would indicate they were concerned about shell injection while writing the code. But if tha

> Perhaps they’re passing this command to a secured container? That would indicate they were concerned about shell injection while writing the code. But if that were true, why would they skip the much simpler step of sanitizing/escaping the input?