Sql databases are usually behind an application layer. Still they can suffer from RCE. Sqlites model is no protection.