I don't think `spawn` uses a shell. The description for `exec` says:

> Runs a command in a shell and buffers the output.

but the `spawn` docs make it sound like it just does a standard fork/exec which will never involve shell glob expansion.