It's my biggest concern as well. For real world application I tend to use out of line filters: filters = [q.field == value1, q.field2 > value2] sql = f

It's my biggest concern as well. For real world application I tend to use out of line filters: filters = [q.field == value1, q.field2 > value2] sql = f'SELECT * FROM table {WHERE(*filters)}' It's a little harder to misuse.