Just like prepared statements in normal SQL, InfluxDB supports parameterized queries:
https://docs.influxdata.com/influxdb3/core/query-data/sql/parameterized-queries/

It would be great in order to avoid injection attacks and close a big security hole.