I feel the same. So so so many "regular expression denial-of-service" issues at my last job that just didn't seem serious or often reachable.