The underlying principle here is Don't Parse (and on the flip side, don't quote). Placeholders are better because they are the solution that doesn't require the SQL's metadata to be correctly generated from parsing your handrolled quoting. Hence you avoid a common source of error.