In Connector$/$J$,$ what is an advantage of executing SQL with a PreparedStatement instead of a Statement?

Using PreparedStatement helps prevent SQL injection attacks.

One PreparedStatement object can be executed several times with different SQL$.$

Creating and executing a PreparedStatement object usually requires fewer lines of code.

PreparedStatement objects are automatically closed after a statement is executed.