It never accidentally deletes anything? Or I guess you give it read only access? It is querying it through this API and some adapter built for it, or the file gets sent through the API, they recognize it is sqllite and load it on their end?

It can absolutely accidentally delete things. You need to think carefully about what capabilities you enable for the model.