[hodgesrm]

> I’m convinced that it’s impossible to write good SQL without peeking into the data.

That's been my experience as well. One question that comes up is how to ensure confidential information does not leak out of the database and into somebody's model or otherwise escape containment. Is that an issue you considered in the design?