In general, yes, \d can match many more than 10 characters. In the above program, no. Even if it did, it wouldn't be a biggie.

However, since it's being used for validation here, [0-9] is definitely way to go in my opinion.