Can we use `flag_get_user_flags()` instead of the db_query?