I find the point sensible. SQLite is a fine internal storage format for an application.

Of course if that storage is swapped among untrusted users, additional scrutiny is needful.