Are you all discussing web development? Then, I assumed that most web developers use ORM. So, I'm purely surprised by the number of people here who are against it.

I agree that abstraction can be leaky, and it's true that you often end up writing some SQL-like code.

However, isn't writing raw SQL potentially dangerous, considering aspects like security, access control etc?

I want to learn your thoughts!