If security isn’t an issue I’ve generally had great success having the schema + few shots be enough for Text2SQL with most modern LLMs directly.

If security is an issue (eg customer facing) then unfiltered Text2SQL of any kind is… problematic 🙂 

What am I missing? 🤔