[macspoofing]

True, but every ORM will make that kind of mistake. You can't just build an object model without paying attention to the SQL layer.