I like the idea of using tagged templates for sanitizing sql query inputs. Kudos