SQLite query built with Swift string interpolation allows SQL injection.
Use sqlite3_prepare_v2 with bound parameters via sqlite3_bind_* instead of interpolating values.