Python中的sqlite3 :手动设置字符串格式对于选择或更新变量列安全吗？

import sqlite3

# 连接到数据库
conn = sqlite3.connect('example.db')
cursor = conn.cursor()

# 创建表
cursor.execute('''CREATE TABLE IF NOT EXISTS users
                  (id INTEGER PRIMARY KEY AUTOINCREMENT,
                   name TEXT,
                   age INTEGER)''')

# 插入数据
name = 'Alice'
age = 25
cursor.execute('INSERT INTO users (name, age) VALUES (?, ?)', (name, age))

# 查询数据
cursor.execute('SELECT * FROM users WHERE age > ?', (20,))
rows = cursor.fetchall()
for row in rows:
    print(row)

# 更新数据
new_age = 30
cursor.execute('UPDATE users SET age = ? WHERE name = ?', (new_age, name))

# 提交更改并关闭连接
conn.commit()
conn.close()