Sorry, I had misunderstood. Had I understood your point, I would have said:

Indeed, without use re 'eval';, regexps won't knowingly run Perl code in interpolated variables. However, it's still possible to write very expensive regepxs and (I think) to crash Perl. I don't know if a crash can be exploited to execute native code.