What is the primary security advantage of using 'parameterized queries' (prepared statements) over string concatenation for SQL in a Node.js backend?

• A.Parameterized queries encrypt the SQL statement in transit to the database
• B.Parameterized queries automatically validate data types, preventing numeric overflow attacks
• C.In parameterized queries, user input is passed separately from the SQL command structure; the database driver treats parameters as data never as SQL syntax, making it structurally impossible for user input to alter the query logic regardless of what characters it contains
• D.Parameterized queries enable database-level access logging not available with string concatenation