You turned an O(n) linear append into a quadratic string-concatenation parade and named it csv like a slur against the format. Any field with a comma or quote in it walks straight through untouched because you never once considered escaping.