Securing CodeQL queries using Semgrep

Can CodeQL queries be insecure? This makes sense as a linter, but not sure about the security value proposition.<p>Edit: missed what day it is