Critical Rust flaw enables Windows command injection attacks

I've run into bizarre behavior with windows command lines plenty of times before, but I'd never put all the pieces together and realized that:

a) windows really does pass around unadorned monolithic strings containing the entire command line of an executed command, and

b) there's no parsing standard for command lines in windows

sigh, windows