I know SQLite is popular with no-backend native mobile apps BUT I read somewhere it's not safe: if a malicious app is granted the ability to read your phone files, it can access the data from the SQLite of other apps.

Can anyone confirm (or deny) this to me?