Gull said Apple doesn't sign SQLite data files, so replacing this file is trivial. Therefore, a threat actor has a simple way they can use to use to gain boot persistence on iPhones and macOS devices.

Type "sqlite" without quotes to start the command line prompt. When the prompt starts, type ".mode list" without quotes and press "Enter" to set up the query mode. Define your field separator.

I've got it in a sub-folder, and the data source has a hard-coded path to the db file. How can I make it relative? For a WebApp, I'd rely on Server.MapPath, but how to do something similar here?