How about you just tell your lazy programmers to use an updated frontend framework that doesn't flag hyphenated last names? It's not a database issue and a regex (ask your programmer) query can allow for that particular special character. It is sql safe and besides, if your programmers are not sanitizing their inputs you should fire them all anyway. IT'S 2021 and people have been hyphenating their last names enmasse since at least the 1990's.
