[quench]

most of the shell exploits are prevented by including NOEXEC: in the sudo permissions. IDK why this is not the default.

This prevents the sudoed command from running any other commands

[themerone]

This would break most package managers and many other system tools.

[PeterisP]

For me, I quite often use sudo to run scripts that install or reconfigure something, and they obviously do need to execute other commands.