Hacker News Reader

http://sqlalchemy.org/ is an ORM and does not have these security issues. So it can be done.

Searching for "sqlalchemy sql injection" brings up this: https://bugzilla.redhat.com/show_bug.cgi?id=783305

I did not say otherwise. I said that ORMs may be vulnerable if they are carelessly constructed.