[jeltz]

I did not say otherwise. I said that ORMs may be vulnerable if they are carelessly constructed.