UNION-based SQLi is called the "Swiss Army knife" of SQL injection because it's the most versatile — once it works, you can read any table in the entire database with a single query, not just the one the app is querying.