Hacker News Reader

I am pretty sure that I can have injection attacks from unsanatized user inputs in any language.

Yes, but some languages (like my personal favorite Rust) make it practically impossible to happen with their equivalent of printf().