What protects opencart against sql injection? What defense methods are used against SQL injection?

What are the methods, technologies, etc. that protect Opencart against SQL injection?

All data passed into a query is done using the database drivers escape function ($this->db->escape()) or is cast to a simple type such as an int and enclosed in single quotes.