I was told to put everything in stored procedures for security reasons and anything that needed to be done to the procedures could be done on the SQL server and I wouldn't have to change anything in ...
A common SQL habit is to use SELECT * on a query, because it’s tedious to list all the columns you need. Plus, sometimes those columns may change over time, so why not just do things the easy way? But ...