I dunno, I've seen ORM absolutely abused. Never underestimate the effect a tool can have in the hands of a clueless person. That said, there are probably fewer

I dunno, I've seen ORM absolutely abused. Never underestimate the effect a tool can have in the hands of a clueless person. That said, there are probably fewer SQL injections in ORM code than typical mysql messes.