There are over 213k+ potentially vulnerable internet-exposed MongoDB instances, ensuring that this exploit is web scale.
I've used it before but couldn't see the advantage over using JSONB with Postgres except change streams.