Sorry, no. Why is it insecure?

Because $address is subject to shell interpolation, see pipe open in open/perlipc, perldoc -q mail, specifically http://perldoc.perl.org/perlfaq9.html#How-do-I-send-email%3f, although the win32 version looks subject to same insecurity :/ weird