Theo de Raadt, one month ago (not the only and first mail in this (derailed) thread though):
>A review of libsqlite source code will demonstrate that it is written
>using many old practices of coping with "older systems". Many of the
>same techniques that caused unneccessary risk in OpenSSL.