I imagine some ORMs don't have this so people can do order by computed columns like "order by assets - liabilities"
To your point it probably makes sense to have an order method that verifies column names and an order_raw method that takes a string so the caller understands the risk, while protecting the usual case.
I know HTML and CSS and tried out the product. I found it so fun I wanted to go through all the lessons, plus I learned some new HTML 5 tricks I had glossed over.