Binding them as literals means we'd have to emit them directly into the SQL statement, yes?

Correct. Which also means we will not be able to cache these SQL statements. Well we could cache them adding tenant-id to the key, but that's not worth it