Today I looked at some code from our CTO. He used plain SQL Statements with huge selects and no prepared statements.

I asked him:
1. why dont you build some helpers or even use some frameworks?
2. why are there no prepared statements?

His answer (to both questions)
We do not need that. That just uses too much ressources and time. It's more cleaner and simpler this way.

My Face: 😵