You're right. I got it confused with the conn object in the code I was working on, because it turns out that it has an execute() method:

>>> import sqlite3
>>> c = sqlite3.connect('test.db')
>>> c.execute('SELECT * FROM tbl')
<sqlite3.Cursor object at 0x7f6dc7a07c00>

Closing, apologies for the noise!