Thank you! Do you know if functions/stored procedures protect against that when done through the dashboard?

I'm not sure what you mean by this? you call functions and stored procedures through the JS client. So same as what I said earlier would still apply.