How do you parameterize queries in PyMySQL to protect against SQL injection?

A$.$

Using the executemany$()$ method

B$.$

Using escape characters

C$.$

Using the $\%$ operator

D$.$

Using placeholders such as $\%$s