Why Is Escaping Data Considered So Magical?

[Lawrence D'Oliveiro]

In message <2010062422432660794-angrybaldguy at gmailcom>, Owen Jacobson wrote:

> Why would I write this when SQLAlchemy, even without using its ORM
> features, can do it for me?

SQLAlchemy doesn’t seem very flexible. Looking at the code examples 
<http://www.sqlalchemy.org/docs/examples.html>, they’re very procedural: 
build object, then do a string of separate method calls to add data to it. I 
prefer the functional approach, as in my table-update example.