because it bypasses the shell, try it yourself and see if you can inject stuff into it