To expand the answer, allowing you to use functions like exec() is like allowing SSH access. This is free web shared hosting so people can end up performing malicious tasks on te entire server holding many accounts if it were to be enabled. And we're talking about anyone.
There's a lot more to it, but it's best to have just this up.