cursor execute how to create string

Question

I see formatting string using the string formatting is not advisable as it is prone to different problems.

However, I do not like embedding the values in the cursor.