> Even this example - will this create a prepared statement or insert a correctly escaped value into the SQL string? It runs the sql function, with separation

> Even this example - will this create a prepared statement or insert a correctly escaped value into the SQL string? It runs the sql function, with separation between the static string parts and the dynamic values, and it returns whatever the sql function returns.