Your comment highlights exactly why the article makes a compelling point. I mean, you make several suggestions before you get to one thing you need to do on input:

> but paramatising queries is a much better practise to get into.