They don't, but they still offer better speed and security than non prepared statement.

And having to dynamically change a table name is uncommon.