Right. The code converts all expressions into $N-parameters. However Postgres does not support parameters in all locations, eg. this would fail:
import { tableName } from "../shared"
sql`SELECT * FROM ${tableName} WHERE id=${formData.get('id')}`
The @vercel/postgres package needs a big disclaimer that it works very differently from node-postgres and what is and is not allowed.