shell=False Is a Small Setting with a Large Security Boundary
Passing an argument array directly to exec avoids an entire class of shell expansion and injection behavior.
Passing an argument array directly to exec avoids an entire class of shell expansion and injection behavior.