I was just reacting to this, which is confusing given your response. > In Go I just write the raw SQL. But in general I agree with you about ORMs (I do not us

I was just reacting to this, which is confusing given your response. > In Go I just write the raw SQL. But in general I agree with you about ORMs (I do not use them). I'm just pointing out that when the easiest/most popular library to reach for to protect yourself against injection is an ORM, it's understandable to use it.