Because the shell argument provides important functionality.  Or are you suggesting that passing a list implies shell=False and passing a string implies shell=True?  That is a possibility, but I think it would not be a good idea, because people will 'accidentally' get shell=True (which, you will note is *not* the default), which is less secure.  It is much better, IMO, to make people ask explicitly for the less-safe behavior.