prepared statements and sql injection

Hello.

Sorry for asking this newbie-question, but reading the following web
page made me get a bit paranoid..

http://jdbc.postgresql.org/documentation/81/server-prepare.html

I am a bit concerned about "There are a number of ways to enable
server side prepared statements depending on your application's
needs". I am using prepared statements to be sure that my application
are not vulnerable to sql injection attacks, but I do not specify a
"prepare threshold". Should I?

Without specifying a PrepareThreshold, are my sql statements
"unprepared" in the jdbc driver before sent to the server? Or are
they sent to the server as prepared statements? Does the
PrepareThreshold control whether my statements are actually prepared
or if the execution plan are cached?

  - Tore.