True but there's so much scope for people to do naive implementations with join() or split() functions and then you end up with nothing escaped properly and a big mess