Why should MySQL Connector cursor.execute() params be variables?

Question

I am trying to create a filter for my API using MySQL connector for python. I process user generated queries that look like this:

user_type_id > 1 and use