RadzenGrid Filter query's generated SQL

Radzen Studio Blazor Server
1

I noticed that the generated SQL from a RadzenGrid filter takes the form:

SELECT COUNT(*)
FROM [MyTable] AS [s]
WHERE CHARINDEX(N'FilterTerm', LOWER(CASE
WHEN [s].[ColumnName] IS NULL THEN N''
ELSE [s].[ColumnName]
END)) > 0

Why is 'FilterTerm' injected instead of using parameterized SQL? This seems both unsafe and does not allow the database to take advantage of cached query plans.

This is with Data assigned an EFCore DbSet

2

The grid is using LINQ to apply sorting, filtering and paging. We have very little control on how EF Core will translate the expressions to SQL.