Per the Python shlex documentation:

Warning The shlex module is only designed for Unix shells.
The quote() function is not guaranteed to be correct on non-POSIX compliant shells or shells from other operating systems such as Windows. Executing commands quoted by this module on such shells can open up the possibility of a command injection vulnerability.
Consider using functions that pass command arguments with lists such as subprocess.run() with shell=False.

There is a Windows equivalent called mslex if we're ok adding another external dependency. Please advise and I will update.

We already use oslex which wraps shlex and mslex, so I've simply swapped that out.

Closes #52 once merged.