Should I worry about SQL injection when using REST API and sql queries via $wpdb?For example, is the bellow vulnerable