Код-ревью: отчёт по клиентам

public interface CustomerRepository extends JpaRepository<Customer, UUID> {
    @Modifying
    @Query("update Customer c set c.active = false where c.lastLogin < :date")
    int deactivateOld(@Param("date") Instant date);
}

@Service
public class CustomerReport {
    private final CustomerRepository repo;
    private final EntityManager em;

    public CustomerReport(CustomerRepository repo, EntityManager em) {
        this.repo = repo;
        this.em = em;
    }

    public List<Customer> byCity(String city) {
        return em.createNativeQuery(
            "select * from customers where city = '" + city + "'", Customer.class).getResultList();
    }

    public long countVip() {
        return repo.findAll().stream().filter(Customer::isVip).count();
    }

    @Transactional
    public void cleanup(Customer current) {
        repo.deactivateOld(Instant.now().minus(365, ChronoUnit.DAYS));
        current.setNote("cleanup done");
        repo.save(current);
    }

    public void importCustomer(CustomerDto dto) {
        Customer c = new Customer(UUID.randomUUID(), dto.name());
        repo.save(c);
        c.setCity(dto.city());
    }
}