And you have to write your "code" in SQL? Where do you draw the line? Do you put authentication there too? slugify for urls?

Although security is a big deal, tools evolved tremendously and databases just aren't as flexible as other languages to do most task.