The common one I fought long ago was folks who always use regular expressions when what they want is a string match, or contains, or other string library function.
Can confirm. Got the same e-mail sent to my Sendgrid registered e-mail address.
Fortunately I also got an e-mail from one of the apps I have that uses Sendgrid so I assumed it was phishing and logged in by hand to check.