We're paying for the support and insurance against failure, not the features. You don't do manual SQL updates. Why would you if you have an ORM? You update th

We're paying for the support and insurance against failure, not the features. You don't do manual SQL updates. Why would you if you have an ORM? You update the domain and it does all of that stuff for you. I only care about the domain which is the stuff that makes the money - not writing SQL. ORMs don't suffer from SQL injection as they use properly parameterised prepared statements. Regarding lock in you are correct, but the RDBMS is the most politicised and expensive component which is why yo uneed the flexibility. I am in no way saying "RDBMSs are shit - NoSQL forever!".