@InspectorCaracal As for how Python's DB API handles query parameters, ugh, they allowed each database to make its own choice. Using "?" is one valid choice, and sqlite chose that one. But some other implementation might choose another :(

>>> sqlite3.paramstyle
'qmark'

https://www.python.org/dev/peps/pep-0249/#paramstyle