Programmers generally agree that user input is untrusted, right? My point is that should just be extended to the database, and even where it isn't, it sorta a

Programmers generally agree that user input is untrusted, right? My point is that should just be extended to the database, and even where it isn't, it sorta already is for attacks.