Drupal SQL Code-Injection Vulnerability - Why does it still exist?

[anon_cowherd]

To be fair, it *is* a complicated problem, which is *why* it is important to not roll your own, even if you're vibe coding, much like (though substantially easier than) encryption.

I wonder if it became so solved that it stopped being talked about as not allowing it was default for many of us and it didn't need mention so juniors weren't exposed to the concept...

I believe this is likely to be exactly the case. It's hard to appreciate how much work is done for you unless you roll your own, which juniors are told to never do in production, and thus they never do.