I appreciate the general explanation suitable to my abilities.

"The regex hardening is especially important because account-level config can otherwise become a performance/security footgun very quickly."

But, I still don't know what a footgun is.