Well, yes, if you only execute the query once, then there’s no difference, because select(row|all) are convenience functions for… executing the query once.

SQL injection can’t happen only on INSERT, though. Any query using user data in some shape or fashion is subject to manipulation.

Makeshifts last the longest.