3. Since you mentioned that speed wasn't a concern, I would go with software raid, which would also alleviate your concerns about 1 and 2.

I think it makes sense to escape as close as possible to the context where the data will be used, see https://benhoyt.com/writings/dont-sanitize-do-escape/