see e.g. https://stackoverflow.com/questions/32355685/join-a-list-of-strings-such-that-each-string-is-within-quotes-and-comma-separate so that SQL injection can be avoided when having dynamic queries.