0
tl/dr: The ability to properly escape user input once does not mean
your company will do it every time. You can't. Don't even try.
You have 2 good answers for the specific question you asked. However, I wanted to touch on some broader issues that are very important here:
Prepared statements ar...