Wow, is this really the norm? I mean, not knowing SQL and working purely with ORM. This seems weird to me, as I learned SQL first.
And I can sympathize. For example, I wouldn't even know how Rails maps a many-to-many relation to SQL tables, so I would have to use the rails console myself to traverse such a relation.
Those that are really good with an ORM can generally go into SQL with ease.
The above is not meant to be objective, just my general observations.
They are a fine tool, but I find it weird that people are using them without knowing the underlying technology which they are based on.
And you also don't need ORMs to do query parameterization.