One thing I like best about Parameterized Queries is that it removes the need for all of those attempts at getting the single quote/double quote (“'“/““““) in the string concatenation correct and makes it so much easier to read.

I know they are good for this and help against injectin attacks but I didn't realize that they helped on performance too.  It makes sense though.