“It requires programmers to primarily do parameterized queries, different kind— is the main defense.”

Transcript evidence from Jim Manico -- The Extremely Unabridged History of SQLi and XSS.