SQL Injection with Entity Framework 5

BooksController_1.cs

public List<Book> Get(string title)
{
    using (var context = new BooksContext())
    {
        var result = context.Database.SqlQuery<Book>("SELECT * FROM Books WHERE Title LIKE '%" + title + "%'", new object[] { });
        return result.ToList();
    }
}

BooksController_2.cs

public List<Book> GetAgain(string title)
{
    using (var context = new BooksContext())
    {
        var parameter = new SqlParameter("@title", title);
        var result = context.Database.SqlQuery<Book>("Book_GetByTitle @title", parameter);

        return result.ToList();
    }
}

BooksController_3.cs

public List<Book> GetParameterised(string title)
{
    using (var context = new BooksContext())
    {
        var parameter = new SqlParameter("@title", String.Format("%{0}%", title));
        var result = context.Database.SqlQuery<Book>("SELECT * FROM Books WHERE Title LIKE @title", parameter);

        return result.ToList();
    }
}

Procedure.sql

CREATE PROCEDURE Book_GetByTitle
  @title    NVARCHAR(100)
AS

DECLARE	@sql	NVARCHAR(2000)

SET @sql = 'SELECT * FROM dbo.Books WHERE Title LIKE ''%' + @title + '%'''
EXEC sp_executesql @sql
GO