It assumes there is no active connection and always closes the connection it gets. That's unsafe. It should use db-find-connection and only open/close when there isn't an active connection.

The same is true for with-db-metadata. All other uses of get-connection seem to have a db-find-connection guard.