My read on this, is that sqlite is not well hardened against malicious databases. The DDL stuff is an explored route, and it seemed easy for us to disable. But, this seems like an area that’s going to get more research, and I’d bet there are more issues.