yeah I think this is the key takeaway for me, because the sanitation needed depends on the consumer of the output. i was never a successful developer but when i was at least trying, i would constantly run into other devs that would happily code forms that allowed sql injection, even in relatively normal winforms apps, not to mention poor understanding of regular ol concurrency / transactions.
since i had a poor reputation (which i take full responsibility for), my concerns would always be dismissed by a combination of "elitist ivory tower thinking", "toxic interactions" and rebuffed with comebacks like the "database server just handles this" etc etc.
if your comment is anything but solid black for the duration of folks reading it, its just more evidence that the vast majority of developers are just shit at their jobs haha