But is that just hyperbole, or do the claims have some merit? For example, can the free version of Microsoft Copilot, available to all Windows users, write a common SQL query for you on command?

Peláez notes the SQL injection is something every site should be protecting against. Web developers should sanitize input to make sure there are no valid SQL commands, use predetermined STORE ...