AWS billing alarms and cost explorer are not realtime services, you can expect a 6 hour delay. In this users case, this could be after $500 has already been spent.

AWS does not do enough to prevent harm, even if a user is diligent with alarms.