I would add SQLite is missing access control, it is a big all or nothing. Usually it doesn't matter as much since the scope is so much smaller, but if you really want to back a major website with it some defense in depth would be nice.