One underrated advantage of ORMs: it's significantly harder to write code vulnerable to SQL injection.