Not really. It's overridden only 5 times, so true is a pretty good default here. I'm not buying the security concerns, either. This stuff is only relevant for driver implementers who need to be aware of these issues anyway. Even if they are not, the risk of screwing up is pretty low. You'd need a type where you can inject an arbitrary string into the string representation, which excludes most types that would be suitable for columns except for String and Clob which we already support out of the box.