If I was an intruder I wouldn't mind about your next item -- I already would have the current one to harm your database. So I really can't get the point in this: having a varchar indexed instead of an int will just make your indexes bigger. How about, instead, securing your APIs so that no one can harm your data?