I wish SQL had a "strict" mode.

No joining without indices, no implicit type conversions, all statements prepared at launch so you can't have arbitrary injection…

@samir there's sadly good reason to generate sql code at runtime for fancy tables with filtering, however one hopes it's done in a structured way
@leftpaddotpy Yes, agreed, you can’t always use something like this (and the product I work on exists to generate SQL, so this wouldn’t work there), but if you’re hand-rolling it, there should be more to doing it safely than prayer.