You're completely right. SQL query hacking can be ridiculous for example. Still, it's a lot better than the alternative.