SQLite to SQL Server best practices

Question

We're taking over a phone app and migrating it from flutter and Firebase to Xamarin and IIS/SQL Server. Typically our apps (all kinds) communicate with SQL Server via APIs in IIS so the db is completely insulated. this also gives us the ability to do all kinds of logging and security checking.

I have never worked wit SQLite and in doing online searches, it looks like people are using things like ODBC to send data to the backend - directly into SQL Server. This seems to be a very bad practice as you have now expose SQL Server to the outside, you lose control of what's entering the server and you lose most of your logging capabilities.

What are the best practices for enterprise level mobile apps using SQLite?

Thank you.