Does id need to be escaped in any way here? Or is this a vector for a cypher injection attack? Or does it not matter because this is kind of a prototype?