"13 lines of code" is a rhetorical device used to conceal the complexity OP_CAT brings to bitcoin's social layer
Regulators forcing on-chain KYC compliance is likely just the tip of the iceberg. The real attack surface of OP_CAT is probably far worse than what is known right now