They're disproportionately requirements for the worst, lowest-status jobs in cybersecurity, and many of the best known and "highest placed" practitioners in the industry (not just in vuln research and xdev but also in management) don't have one.
To be fair: this is, like, a 2010 acronym, and I'm dating myself just by using it; I just have a dry-eye thing going today that's making screen time annoying and didn't want to type the words out. :)
