You're right. Now that I'm thinking about it, making a query that works is less difficult than also proving it is safe.

Good luck with your project.