Might ask you about this one in person. The way I built the data.py file relies on having a single string for the query (curious about the approach I took here in general with data.py). I could change that, but it will be a refactor that will make the generic read/write functions I defined more complex (they'd need to take a list of arguments for queries rather than just a string). Seems like sanitizing is irrelevant in GQL land since db is read only.