The only reason BeyondTrust implemented that was it wasn't untrusted user commands. They sanitized the data, so it should have been fine. The unfortunate problem was that the sanitizer didn't sanitize.
Systems are built on a set of expectations. Undermine the expectations and you undermine the system.
Systems are built on a set of expectations. Undermine the expectations and you undermine the system.