It doesn't prevent you from using them. You simply get a sql statement with appropriate place holders. You can pass that sql statement to your database library

It doesn't prevent you from using them. You simply get a sql statement with appropriate place holders. You can pass that sql statement to your database library and it will do the right thing - including binding the parameters and creating prepared statements as necessary.