I don't think the argv was made with security in mind.

If we want something to be used in security field, the design since day 0 should consider it. Trying to retrofit something will break a lot of things.