Absolutely, the idea was to provide prepared queries while allowing people to migrate their code.
The point wasn't "this fixed the injection problem" it was that it provided a solution not available for mysql_
The point wasn't "this fixed the injection problem" it was that it provided a solution not available for mysql_
Only if they're used. If mysqli_ required prepared statements, then it would be different. But the sins that were committed with mysql_* could still be committed with mysqli_*.