[blorgle]

You shouldn't pass unescaped/untrusted input into a subshell but your suggestion doesn't solve for every case. It protects against ";" but not path traversal with "../../../../../foo/bar".

[yjftsjthsd-h]

You'd have to cover that if you wrote your own library function, though; it's attack surface, but not uniquely so.