Just as with the low security of many domain registrars, I guess there are not as many horror stories as my paranoid mind would lead me to believe. Any thoughts?
PS: Yes, I understand the dangers of enabling these limits, which ideally should be accompanied by previous alerts, etc.
[1] https://forums.aws.amazon.com/thread.jspa?threadID=10532