of course it was a bit of a generalization. However I don't think it's harder to use prepared statements and I do think you should always use it, even if you're

of course it was a bit of a generalization. However I don't think it's harder to use prepared statements and I do think you should always use it, even if you're absolutely sure that the data you get in isn't an injection. Not using it rings an alarm bell IMO.