The params() method doesn't substitute escaped parameters.