Why this is not SQL Injection (weird)

Summary

The transcript discusses how Entity Framework Core 8 protects against SQL injection when using raw SQL queries by utilizing formattable strings. Instead of traditional string concatenation, EF Core automatically converts interpolated values into SQL parameters, which prevents potential security vulnerabilities. This approach provides a safer method for constructing dynamic SQL queries by inherently parameterizing input values. The key takeaway is that developers can now write raw SQL queries with embedded values more securely and with less manual parameter management.