Continue to use the bind parameter syntax even on non prepared statements

Appears to effectively revert #8966
He was using the non prepared statement so that .to_sql would return
sql with parameters already bound, although this doesn't relate
to whether we are using prepared statements or not.
Also related https://github.com/rails/rails/commit/fd398475