A maliciously crafted record ID can exploit a SQL Injection vulnerability in the iOS adapter implementation, causing the app to delete all or selected records from the database. This may happen in apps that don't validate IDs and use Watermelon Sync or the low-level `database.adapter.destroyDeletedRecords` method. The integrity risk is low due to the fact that maliciously deleted records won't synchronize, so logout-login will restore all data. No way to breach confidentiality with this vulnerability is known. Full exploitation of SQL Injection is mitigated because it's not possible to nest an insert/update query inside a delete query in SQLite.