Good catch. You're absolutely right for UNIXish shells. But for cmd.exe (MS Windows), the double-quotes are necessary and safe: single quotes won't work, and things like $a are not seen as variables.
Between the mind which plans and the hands which build, there must be a mediator... and this mediator must be the heart.