So turns our I am an idiot. I Overwrote the VARCHAR Type and with the new Hibernate Type system instead of extending the VarCharType i just made it implement JdbcType. Thats why Hibernate did not escape my string, its kind of surpising that it even worked that well