Imagining we have literal strings, and we are design PDO 2.0, one of the things that would probably be done is that trying to pass a non-literal query string would be a type error as it would force you to use prepared statements.
Because a query string might conditionally add a WHERE clause and then ensuring it isn't fulfiled with a runtime value being concatenated/interpolated is hard except if you set up taint analysis.
But other than creating a SQLBuilder that returns SQLBuiltQuery objects that provide an API that takes care of building and carrying the placeholders eeeeeeh