格式函数vs sql注入场景中的参数？

I know about the uses of parameters in sql sentences, But just for curiosity is safe to use the Format function to prevent sql injections instead of use paramters.I know about the uses of parameters in sql sent