it seems ALARM only affects user level calls..

Not at all. As Corion's program demonstrates, system calls are clearly interrupted.

The signal will only be handled between Perl ops, so a long running op (regex match or XS function call) could delay the handling of the signal.