You all know how `popen(3)` shells out and thus has been the cause of countless command injections, but did you also know that #NetBSD has `popenve(3)`, which uses `execve(2)` instead?
https://man.netbsd.org/popenve.3
Seriously, other #Unix versions should pick that up.