Because someone couldn't be bothered to parameterise their queries, and, as such, is explicitly rejecting characters which are used by some underlying language

Because someone couldn't be bothered to parameterise their queries, and, as such, is explicitly rejecting characters which are used by some underlying language they're working with (or Windows environment variables, I suppose). Same reason you'll see dollar signs and quotes often disallowed.