This is a neat DB-side last line of defense! I agree that parameterization is the Right Way to ensure safety, but if we're being realistic you'll never actually

This is a neat DB-side last line of defense! I agree that parameterization is the Right Way to ensure safety, but if we're being realistic you'll never actually get everyone to do it the right way, so it's worth putting in safety mechanisms like this that you can implement inside the library where it'll benefit everyone.