mdb2 and sql injection security

Hi,
I'm curious if MDB2's methods are protecting our program from sql injection. It has an escape method but is it called whever I call the query or queryOne or _doQuery methods or whatever. Is it done in all the methods or should I call it myself?

I'm asking this because I was using some manual protection (yes very poor is that way and I want to change it.) and when I started to use mdb2, I saw that there were more then one "" in the db When I disabled my own escape function. Everything was fine. So Is it used by default or not?

Thank you for your time.