it doesnt feed the whole DB into the context, it gives Claude the option to QUERY it directly

It never accidentally deletes anything? Or I guess you give it read only access? It is querying it through this API and some adapter built for it, or the file gets sent through the API, they recognize it is sqllite and load it on their end?