If somebody makes a preposterous new claim, the burden is on
THEM to prove it.
Don't fall for the trick that you must disprove such malarky.
Nothing's changed with SQL server 2005. From performance,
decoupling, security, and maintainabilty perspectives: stored
procedures work best, cfqueryparam next best, and ad hoc queries
will bite you sooner or later.