How Secure Is DbContext When Using "myContext.Database.ExecuteSqlCommand"

How secure is ExecuteSqlCommand when providing an actual stored procedure call?  Is it using "clear text" like ADO.NET does when sending a command text?  Below is an example:
myContext.Database.ExecuteSqlCommand<myEntityType>( "mySpName @param1, @param2, @param3", new SqlParameter("param1", param1), new SqlParameter("param2", param2), new SqlParameter("param3", param3) );