Am I missing something here about needing "quotemeta" for the hash's values as well?

I was suggesting quotemeta not because of the hash, but because of their use in a regular expression.