Custom where clauses are not sanitized by getters, but your clause isn't related to user input.