Parameterized prepared statements has already been released to Dremio Cloud and the documentation is here: JDBC Driver for Arrow Flight SQL | Dremio Documentation
The same docs should apply to v26 which is targeted for 2025.
Regarding the implementation, the primary driver was security and preventing SQL injection attacks. Parameterized SELECT statement will also benefit from the existing plan cache feature.