As far as I can tell, the problem is not such much that escapeshellarg is disabled, but that Flarum Extension Manager uses the Composer command under the hood to install extensions. And running system commands on free hosting is not possible, so that won’t work.
On premium hosting, running system commands is disabled by default for your own safety, but you can easily enable it through cPanel.